Release 21.01.2025 | Privacy mode, 2FA improvements
New
- Added
privacy-mode
setting. You can use two modes:
-
Full
mode - remove Name, Email, Phone from MF API request. -
Partial
mode - only marked fields are sent in the MF API request.Examples
Full mode <add key="privacy-mode" value="Full"/>
Send only Name <add key="privacy-mode" value="Partial:Name"/>
Send Email and Phone <add key="privacy-mode" value="Partial:Email,Phone"/>
- Added the
load-active-directory-nested-groups
setting. The setting is responsible for loading nested groups when loading a user profile.<add key="load-active-directory-nested-groups" value="true/false"/>
- Added the
nested-groups-base-dn
setting. The setting specifies where to start searching for nested user groups. By default domain root is used. Multiple DNs can be specified via;
<add key="nested-groups-base-dn" value="CN=users,DC=domain,DC=your"/>
- Added the
active-directory-group
setting. The setting specifies the groups the user must be in to pass the first factor. Multiple groups can be specified via;
<add key="active-directory-group" value="required_group_1;required_group_2"/>
- 2FA is now set up through the Multifactor web application