Not really a conflict in my opinion : https://bugs.limesurvey.org/view.php?id=17434

In general :

1. Connect with User/pass
2. If OK : new page with 2FA

The TwoFactorAdminLogin must work like this (in my opinion).

I ran into this issue as well - after having LDAP authentication enabled for some time I decided to go ahead and enable the 2FA plugin, only to find myself locked out. I don't disagree with @denischenu but the current functionality is broken. @galads is this something I can help with if someone defines the preferred implementation? I am on CE Version 5.1.10+210913.

Surprised this was last updated in 2022.

We use Lime Survey (public sector organisation) and the UK are now mandating AD / LDAP integration AND 2FA as a minimum security requirement for logging in to external-facing web apps.

Can this be developed, agree with @denischenu

I agree it should work like @DenisChenu describes, but right now it doesn't.

We have LDAP enabled an AuthDb for the admin user. We'd like to protect the admin user with 2FA, but can't right now, as the 2FA code field is not displayed on the login form. Are there any plans to fix this?

My opinion:

• 2FA option can have : forced Yes/No
• 2FA option apply on "AuthDB" yes/No
• 2FA option apply on "Other auth" (maybe list of activated Auth Plugin ?)

Jelle_S : i think you must report separatly here .

For our use case it should only apply to authdb, as we only want to protect the admin user with 2FA, so I'm not sure it should be a separate issue? We are experiencing the exact same issue as in the original report.