eho/register-referentie
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

S-15c · Enforce MFA on the medewerker (Keycloak) realm #132

New Issue
Closed
opened 2026-07-24 08:36:57 +00:00 by not · 0 comments
not commented 2026-07-24 08:36:57 +00:00
Contributor
Copy Link
Copy Source

Split from #16 (S-15), CLAUDE.md §13. Third of three.

Outcome: the Keycloak medewerker realm enforces MFA (OTP) for medewerker logins (behandel + beheer portals). Realm export updated with a required OTP action / browser flow; verified by a check that a medewerker login is challenged for a second factor. Self-contained infra/realm change.

Out of scope: portal UI work (S-15a/S-15b).

Definition of Done

  • Failing test/verify committed first; implementation makes it pass.
  • Conventional Commits referencing this issue (refs #NN).
  • CI green (verify-stack compose smoke + relevant checks).
  • docker compose up reaches green health within 3 minutes.
  • Docs touched; ADR if a non-obvious decision; demo note if user-visible.
  • Closed by the merging PR (closes #NN).
Split from #16 (S-15), CLAUDE.md §13. Third of three. **Outcome:** the Keycloak **medewerker** realm enforces **MFA** (OTP) for medewerker logins (behandel + beheer portals). Realm export updated with a required OTP action / browser flow; verified by a check that a medewerker login is challenged for a second factor. Self-contained infra/realm change. **Out of scope:** portal UI work (S-15a/S-15b). ## Definition of Done - [ ] Failing test/verify committed first; implementation makes it pass. - [ ] Conventional Commits referencing this issue (`refs #NN`). - [ ] CI green (verify-stack compose smoke + relevant checks). - [ ] `docker compose up` reaches green health within 3 minutes. - [ ] Docs touched; ADR if a non-obvious decision; demo note if user-visible. - [ ] Closed by the merging PR (`closes #NN`).
not added this to the Iteration 3 — Beheer & Observability milestone 2026-07-24 08:36:57 +00:00
not added the area:infraarea:portal-beheertype:slice labels 2026-07-24 08:36:57 +00:00
not closed this issue 2026-09-04 08:27:54 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:acl
area:bff
area:docs
area:domain
area:event-subscriber
area:infra
area:portal-behandel
area:portal-beheer
area:portal-openbaar
area:portal-self-service
area:projection
area:workflow
type:adr-proposal
type:bug
type:chore
type:slice
No labels area:infra area:portal-beheer type:slice
Milestone
No items
No Milestone Iteration 3 — Beheer & Observability
Projects
Clear projects
No projects
Assignees
Clear assignees
eho (Edwin van den Houdt)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: eho/register-referentie#132