2FA sync via Cloudron Connector not working

[Teiluj]

Hi - It seems as we are facing a recent issue with regards to 2FA in a setup where one cloudron server is used as the identity provider and other cloudron servers sync with this IDP cloudron server.

Similar to here, please consider the following setup:

In case of 2 Cloudron servers connecting user directories, the docs tells us:

The Cloudron connector is the only one that supports 2FA. If the user has 2FA setup in the Cloudron LDAP Server, then 2FA is required to login

So in practice, in the setup:

• Cloudron Server A (CSA) is the one owning the user directory. CSA has 2FA enabled / requires users to set up >2FA.
• Cloudron Server B (CSB) user directory is connected with CSA via the "Cloudron connector" (External Directory connection provided by Cloudron)

Until recently, when logging on the CSB server, a "synced-user" was prompted for username, password and then 2FA

Recently (unfortunately, I am not able to pinpoint when exactly this started) however, synced-users are only asked for username and password and not 2FA anymore.

It currently seems as the Cloudron connector does not support 2FA anymore.

Is there anything I should look into to make sure that the "2FA sync" when using the cloudron connector works again?

[james]

Hello @teiluj
Thanks for reporting.
It could be that the CSA remembers the 2FA status and propagates it to the CSB, thus the 2FA not needed when CSA already validated that.

But that is an assumption. We will have to look into reproducing this.