News for hackers. Stuff that matters.

A comment on Notion API – public beta. Parent comment

Re:Notion API – public beta by ezekg on Thursday May 13, 2021 @05:27PM (#27147693)
Do they still not support things like 2FA? At my previous company, we couldn't get buy-in from our security team due to them not supporting 2FA. The team loved Notion, but that was a deal breaker. Also, if I remember correctly, magic email links could not be disabled. There is no excuse for not implementing 2FA w/ an authenticator app -- it took me a couple days to implement it into my product. They've had people asking for 2FA for literal years (just search Twitter!)
[ Parent | on HN ]
Re:Notion API – public beta by m-p-3 on Thursday May 13, 2021 @05:57PM (#27148000)
Maybe your security team could implement an authentication server with 2FA to cover those softwares that don't support it natively?

For example, https://www.authelia.com/ is open-source.

[ Parent | on HN ]
Re:Notion API – public beta by OJFord on Thursday May 13, 2021 @07:32PM (#27148807)
That only works if you can put the app on your internal network; Notion is neither self-hostable nor available 'on-premise' w/peering, that's what people are complaining about here.

You can't magically put 2FA in front of some third-party public site. (You could from within your own network.. but that's perhaps worse than pointless!)

[ Parent | on HN ]
Re:Notion API – public beta by ArchOversight on Thursday May 13, 2021 @07:33PM (#27148822)
How does this solution help if the SaaS offering doesn't support alternate authentication providers and doesn't offer 2FA?
[ Parent | on HN ]
Re:Notion API – public beta by m-p-3 on Thursday May 13, 2021 @07:37PM (#27148865)
Sorry, I thought it was self-hostable.

Yikes, no 2FA or SSO isn't good..

[ Parent | on HN ]