News for hackers. Stuff that matters.

A comment on Tailscale SSH. Parent comment

Re:Tailscale SSH by jaywalk on Wednesday June 22, 2022 @01:54PM (#31839452)
> Users would login with their Okta creds and a push would silently go to their devices. If they didn't know to check their phone it would just fail to login.

How would users not know to check their phone? They had to specifically set up this MFA method.

[ Parent | on HN ]
Re:Tailscale SSH by mdeeks on Wednesday June 22, 2022 @04:14PM (#31841297)
Because they didn't specifically set it up. That is just how Okta MFA over LDAP works: https://help.okta.com/en-us/Content/Topics/Directory/LDAP-in...

Also people just forget. Some people may only need the VPN once per month and in that time they forget about this weird login flow. They just assume they typed their password wrong or that they lost permissions to the VPN or something.

[ Parent | on HN ]