Enable KeyCape bootstrap MFA mode

2026-05-25 00:16:05 +02:00
parent 4cc22bec9e
commit 5af876eb8c
4 changed files with 17 additions and 7 deletions
--- a/sso-mfa/k8s/keycape/create-secrets.sh
+++ b/sso-mfa/k8s/keycape/create-secrets.sh
@@ -94,7 +94,8 @@ authelia:
 privacyidea:
  baseURL: "http://privacyidea.mfa.svc.cluster.local:8080"
  adminToken: "${PI_ADMIN_TOKEN}"
-  realm: "netkingdom"
+  realm: "coulomb"
+  requireForAll: true

 # ── OIDC client registrations ─────────────────────────────────────────────────
 # clientType: "public" for SPAs/native apps (PKCE, no client secret)