We should look at enabling MFA in Jenkins
I'm guessing there should be some plugins to allow us to do this.
Reference: https://support.cloudbees.com/hc/en-us/articles/216559477-Multi-factor-Authentication
Description
Description
Related Objects
Related Objects
Event Timeline
Comment Actions
Looks like that linked article actually says that Jenkins doesn't do MFA itself and users of Jenkins should instead integrate Jenkins with a Single Sign-On solution that supports MFA. So this seems blocked on that, correct?
Comment Actions
That was my reading of the article as well. After a quick search of Jenkins plugins I didn't find anything related to TOTP, 2-Factor auth, or MFA other than that article.
Comment Actions
I have read again the blog post which is merely a FAQ entry. There are plugins for SAML, OpenID, Oauth, Google or Github.
We have a tracking / epic task to add single sign on / MFA for every system T189531: All Wikimedia developer services should use single sign-on and some progress at T233921: Further steps for CAS/web SSO
That is not going to be achieved Continuous-Integration-Infrastructure but instead integrate with whatever global solution we end up having. So I am declining in favor of the epic task above.