UbuntuOne/Launchpad two-factor authentication

[Mohammed Naser]

On Mon, Nov 22, 2021 at 3:15 PM Jeremy Stanley <fungi at yuggoth.org> wrote:
>
> For a little over a year Ian, Clark and I have been using the
> multi-factor authentication feature of UbuntuOne SSO (i.e.
> Launchpad) in order to more strongly secure the accounts we rely on
> for OpenID logins to the Web interfaces of our services like Gerrit
> and StoryBoard. It's gone smoothly, I think, and so we're probably
> overdue on our plan to offer this capability to other OpenDev users.
>
> Support for this is not enabled by default, your SSO account needs
> to be a member of a group which is granted the feature. We have one
> such group authorized for this purpose, which can be found here:
>
>     https://launchpad.net/~opendev-2fa
>
> Please see the information and important caveats documented in the
> group description. I expect the process would be something like
> using the LP group members page to request membership for your
> account, and then one of the group administrators would approve the
> request, after which you would be able to proceed with configuration
> of your token or other HOTP/TOTP authenticator.

For context, I've been doing this for many years now and it's been working
very well for me.

> I'm bringing it up here first for discussion, in order to see if
> anyone has any concerns or related suggestions, but barring none
> I'd like to move forward with a "soft" (quiet) call for wider
> testing the first week of December.
> --
> Jeremy Stanley



-- 
Mohammed Naser
VEXXHOST, Inc.