onelogin/onelogin-python-aws-assume-role

Token pushes using API endpoint not working?

nneul opened this issue · 1 comments

nneul commented

Up until very recently (last day or so), I've been able to emulate pushing a OTP token by doing a 'GET' to the endpoint:

https://app.onelogin.com/otp_auto_token/receive_token/<credential_id>/<actual otp>

i.e. if you're generating the actual TOTP value with oathtool or some other TOTP library.

Sometime in last couple of days, this has stopped working apparently and it's impacting my use of this module since it wants to sit an wait for that push notification based handling before prompting.

Looking for any information on updating apps to accommodate whatever has broken above.

I was able to proactively send otp by proactively adding it to the client.get_saml_assertion_verifying call in the 'OneLogin Protect' section of the assume role script, but that's just bypassing the push. Is there any way to get the above push URL to work again?

nneul commented

I realize this isn't really directly related to this module but figured the folks on this dev team would likely have relevant information/knowledge of changes to that endpoint.