Source evidence

2fa enforcement

SSO for Entra ID · support · 2025-03-10T19:43:00+00:00

SSO for Entra ID plugin evidence original source source API

complaintsentiment

highseverity

0.9relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 34 rows with source links

17.6% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

28 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

Dima unresolved

Is that obvious that plugin does not enforce 2fa? Hello, users that log in through this plugin skip the WordPress login system. This is intentional. 2FA can be enforced through Azure AD / Entra ID. i mean 2fa , MFA по Microsoft Entra ID. This module does not enforce/enable MFA, even if the policy which enforces MfA applied to the MS Entra app. It is because there are wrong scope. If someone need a right scope – i can share patch, but it will work with bedrock/composer. This changes must be applied to the module by maintainer. Hello, I have just run a test with my development AAD tenant, which has security defaults enabled, and I was correctly asked for 2FA. If a user is already signed in on the AAD side they will not be asked to log in again, which is expected. It may be possible to enforce additional restrictions with Conditional Access, if you have access to it.

Commercial Context

Opportunity

access control and account operations

SSO access-control assurance for keeping user access, permissions, and protected content correct

Buyer: membership site owners, agencies, and operations teams

Wedge: test SSO roles, protected content, SSO/login handoffs, and private-data exposure

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: 2fa enforcement: users show security, missing feature pain that may indicate a product gap.

Evidence quote: Hello, I have just run a test with my development AAD tenant, which has security defaults enabled, and I was correctly asked for 2FA.

Affected feature: security

security missing feature

Plugin

API

SSO for Entra ID

600 active installs · 13.8K downloads · rating 100.0

azure ad entra-id microsoft-entra-id oauth sso

Comments

3 shown

Marco 2025-03-22T13:57:00+00:00

Hello, users that log in through this plugin skip the WordPress login system. This is intentional. 2FA can be enforced through Azure AD / Entra ID.

Dima 2025-03-22T14:10:00+00:00

i mean 2fa , MFA по Microsoft Entra ID. This module does not enforce/enable MFA, even if the policy which enforces MfA applied to the MS Entra app. It is because there are wrong scope. If someone need a right scope – i can share patch, but it will work with bedrock/composer. This changes must be applied to the module by maintainer.

Marco 2025-03-23T09:57:00+00:00

Hello, I have just run a test with my development AAD tenant, which has security defaults enabled, and I was correctly asked for 2FA. If a user is already signed in on the AAD side they will not be asked to log in again, which is expected. It may be possible to enforce additional restrictions with Conditional Access, if you have access to it.