[Freeipa-users] 2fa with trusted AD users

[Alexander Bokovoy]

----- Original Message -----
> On Fri, 2015-05-01 at 13:03 +0000, Andy Thompson wrote:
> > Is this possible or do they have to be local IPA accounts?  Looking
> > at options for setting up freeradius with IPA on the backend and
> > utilizing OTP, I've got a test case setup and working for local
> > accounts but a lot of our users are trusted accounts.
> > 
> > > From what I can tell it is not possible currently but I saw a
> > > reference along the line somewhere about external users.  Can't
> > > really find much  info otherwise.
> 
> It is not currently possible. However, I believe Alexander had some
> ideas related to this. I've CC'd him.
Not supported right now. We haven't started working on it but most likely 2FA support
for AD users will come as part of ID Views feature.
-- 
/ Alexander Bokovoy