Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

goaguiar99 · 2023-11-29 21:30:29

Hello GLPI Community,

I'm exploring the integration of Azure AD into our GLPI system, particularly concerning the implementation of Multi-Factor Authentication (MFA) for user security. We're currently considering the OAuth IMAP plugin for this purpose.

My main queries are:

1. Does integrating Azure AD with the OAuth IMAP plugin in GLPI provide MFA for all users?

2. Can this setup reliably scale to accommodate more than 1,000 users?

3. Additionally, are there any alternative methods for incorporating MFA into GLPI that might be more effective or efficient?

Any insights or experiences shared on this matter would be greatly appreciated.

Thank you in advance for your assistance.

talonik · 2023-11-29 23:06:10

Integrating Azure AD with the OAuth IMAP plugin in GLPI can provide MFA for all users, offering enhanced security, centralized management, and a seamless user experience.

However, I recommend alternative methods for incorporating MFA into GLPI, including SAML-based SSO and RADIUS-based authentication. However, integrating Azure AD with the OAuth IMAP plugin is often the most straightforward and cost-effective solution)

cconard96 · 2023-11-30 00:21:30

GLPI 10.1 will bring authenticator support which can be enforced on a global, entity, group, or profile level. You can even forcibly exclude certain users from the enforcement policy if you wish. The feature will let you configure a grace period too to roll out the requirement over time to users. It should be compatible with all Time-based OTP apps like Microsoft Authenticator, Google Authenticator, Authy, etc. Finally, it will allow the use of one-time codes (a small number of them retrieved when 2FA is set up) which can be used in place of the time-based code in case the authenticator app is unavailable.

goaguiar99 · 2023-12-01 20:05:29

Wow, that's great news! Thanks for responding. Do you have any information on the release date for this new feature or for GLPI 10.1?

talonik · 2023-12-01 20:49:36

I've heard smth about the release date January 2024.

cconard96 · 2023-12-02 23:06:30

You can see the milestone on GitHub for the current "work in progress" tasks for GLPI 10.1. As of right now, there is no due date and I am not aware of any specific timeframe for the first beta release. There are a few more big features in progress that are planned for GLPI 10.1. As the planned features get finished up, I believe the "due date" on the milestone would be updated to indicate a general timeframe for the first beta.

https://github.com/glpi-project/glpi/milestone/49

Forum GLPI-Project

Announcement

#1 2023-11-29 21:30:29

Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

#2 2023-11-29 23:06:10

Re: Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

#3 2023-11-30 00:21:30

Re: Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

#4 2023-12-01 20:05:29

Re: Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

#5 2023-12-01 20:49:36

Re: Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

#6 2023-12-02 23:06:30

Re: Integrating Azure AD with GLPI for MFA: Scalability and Alternatives

Board footer