Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Synthetics] Allow creating MFA tokens as part of Global Parameters #193087

Open
vigneshshanmugam opened this issue Sep 16, 2024 · 2 comments
Open
Labels
Synthetics Team:obs-ux-management Observability Management User Experience Team

Comments

@vigneshshanmugam
Copy link
Member

Describe the feature:

Add first class support for MFA TOTP based tokens in the Synthetics UI. Synthetics would allow users to create a new type of Global Variable totp_token which would let users store the SECRET and generate OTP code on demand when running Synthetics monitors.

There are two flows for this

Allowing users to store Secret as params

This is similar to how one would create sensitive params, Users would create a sensitive param called MFA_SECRET and use that in the synthetics tests as params and generate the token - elastic/synthetics#957

Generating OTP directly in Kibana

This is where the first class support for MFA comes in. We would allow users to do the following

  1. Create a global variable called MFA_GH_TOKEN of type totp_token in the Global params tab.
  2. We should allow users to upload the Secret either via QR code or plain text secret (Similar to Google Authenticator, Authy, etc). Look at the example https://otplib.yeojz.dev/
  3. UI should allow generating OTP on demand if needed for testing.
  4. The token MFA_GH_TOKEN should be available as global variable to access inside Lightweight and Browser journeys like every other params.
  5. The token should be fresh every time the test was run. We should find a way to automatically generate a new OTP every time the test was run.

Describe a specific use case for the feature:

A common use case for synthetics is testing sites behind a login. Those login flows often use MFA, which is difficult for current users of synthetics as there no first class support for TOTP based tokens for all the monitors.

@vigneshshanmugam vigneshshanmugam added Synthetics Team:obs-ux-infra_services Observability Infrastructure & Services User Experience Team labels Sep 16, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)

@vigneshshanmugam vigneshshanmugam added the Team:obs-ux-management Observability Management User Experience Team label Sep 16, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

@vigneshshanmugam vigneshshanmugam removed the Team:obs-ux-infra_services Observability Infrastructure & Services User Experience Team label Sep 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Synthetics Team:obs-ux-management Observability Management User Experience Team
Projects
None yet
Development

No branches or pull requests

2 participants