简体   繁体   English

WSO2 Identity Server一次性密码与外部用户存储?

[英]WSO2 Identity Server One-Time Password with external user store?

A couple questions I couldn't find answers to with WSO2 Identity Server: 使用WSO2 Identity Server无法找到答案的几个问题:

  1. Is it possible to use the One-Time password feature with an external identity store? 是否可以在外部身份存储中使用一次性密码功能? For example, I'm looking to enable this feature for users on an external user store accessed by SAML. 例如,我希望为SAML访问的外部用户存储上的用户启用此功能。

  2. I noticed that with the "One-time password" feature of WSO2 enabled, it looks like the users "regular" password is disabled. 我注意到启用WSO2的“一次性密码”功能后,似乎用户的“常规”密码已禁用。 Is there a way to allow the user to log in either using their normal password OR the one-time password? 有没有办法允许用户使用其普通密码或一次性密码登录? Or do they have to use the password emailed to them while this feature is enabled? 或者启用此功能后,他们是否必须使用通过电子邮件发送给他们的密码?

  1. Yes. 是。 One time password will be handled and validated by Identity server itself. 一次密码将由身份服务器本身处理和验证。 External user store is contacted to retrieve the userId and necessary claims only, in this case. 在这种情况下,仅联系外部用户存储以检索userId和必要的声明。
  2. Yes. 是。 You can add two "Authenticators" in "Local & Outbound Authentication Configuration" > "Advanced Configurations" > "Step 1". 您可以在“本地和出站身份验证配置”>“高级配置”>“步骤1”中添加两个“身份验证器”。 Add "Basic" and "One-Time Password of your choice". 添加“基本”和“您选择的一次性密码”。 Multi-Option Authentication describes the concept behind this. 多选项身份验证描述了其背后的概念。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM