From 78ad8c0d088aa95ec1bd7eadea45ffdba05d907e Mon Sep 17 00:00:00 2001
From: Dylan William Hardison <dylan@hardison.net>
Date: Fri, 15 Sep 2017 16:13:18 -0400
Subject: Bug 1364233 - Add setting to force a group to require MFA and
 restrict users in that group who have not enabled MFA

---
 Bugzilla/Config/Auth.pm | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

(limited to 'Bugzilla/Config')

diff --git a/Bugzilla/Config/Auth.pm b/Bugzilla/Config/Auth.pm
index 58a3d3cd7..612fd1f3f 100644
--- a/Bugzilla/Config/Auth.pm
+++ b/Bugzilla/Config/Auth.pm
@@ -183,6 +183,21 @@ sub get_param_list {
             type    => 't',
             default => '',
         },
+
+        {
+            name => 'mfa_group',
+            type => 's',
+            choices => \&get_all_group_names,
+            default => '',
+            checker => \&check_group,
+        },
+
+        {
+            name => 'mfa_group_grace_period',
+            type => 't',
+            default => '7',
+            checker => \&check_numeric,
+        }
     );
     return @param_list;
 }
@@ -234,4 +249,4 @@ sub _check_passwdqc_random_bits {
     return "";
 }
 
-1;
+1;
\ No newline at end of file
-- 
cgit v1.2.3-24-g4f1b