SSO with Device Approval (Log in with device)

[eduardomozart]

It would be great if SSO users could log in using a trusted device (Device Approval) instead of relying on their master password. This feature seems to be supported for local logins.

[BlackDex]

PR's are welcome.

[stefan0xC]

We neither support setting a different decryption option for sso nor device approvals for SSO because most of where this is managed is not licensed under a free and open source license (GPLv3). So if we wanted device approval we would have to somehow reimplement this functionality which I'm not sure is possible or makes sense. I mean it wouldn't for adding it to the /admin panel because in comparison to the Admin Console the /admin does not have a way to deal with anything that's encrypted, so not sure how that would or even could work. But also adding device as trusted device as a user seems to have some prerequisites which maybe not possible to implement. That would need more time and further inspection and also a check if it's possible without breaching any of the license agreements.