Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FEATURE REQUEST: Support caching user auth failover credentials #254

Open
tonyyo11 opened this issue Nov 14, 2024 · 0 comments
Open

FEATURE REQUEST: Support caching user auth failover credentials #254

tonyyo11 opened this issue Nov 14, 2024 · 0 comments
Labels
enhancement New feature or request
Milestone

Comments

@tonyyo11
Copy link

Is your feature request related to a problem? Please describe.
Apple Silicon Local Credentials state: Only one Apple silicon authentication method is allowed at a time. If you specify multiple authentication methods then only one will be saved via the priority order as follows; local end user's password, then an existing local account, then the local super service account, Jamf Pro API client/secret credentials, and finally Jamf Pro API username/password credentials.

As such, a situation where using the Jamf Pro API, plus AuthMDMFailoverToUser OR AuthCredentialFailoverToUser results in the user being required to enter their password any time the failover kicks in. super supports the key AuthAskUserToSavePassword which saves the user's credentials to the keychain, but if used in conjunction with the Jamf Pro API, this key will result in super preferring to default to prompt the user for their password and not attempting to make use of the Jamf Pro API.

Describe the solution you'd like.
Although clearly stated the order of preference for authentication and the fact that super will only save on authentication type, this FR is requesting the ability to save multiple cached credentials in order to facilitate the following flow: Jamf Pro API attempt > Failover to User > Save User Credentials for future failovers.

Could you describe alternatives you've considered?
None in practice. Reviewed manage_authentication_options() in the super script which is where the script is checking/making use of the saved credentials.

Additional Context:
Feature request submitted on behalf of user:Poppy - MacAdmins Slack

@Macjutsu Macjutsu added the enhancement New feature or request label Nov 14, 2024
@Macjutsu Macjutsu added this to the v5.x.x milestone Nov 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants