| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 924 |
| Technical Name |
de_2fsso_enforcer |
| License | OPL-1 |
| Website | https://gencbaris.com/odoo_plugins/ |
| Versions | 18.0 19.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 924 |
| Technical Name |
de_2fsso_enforcer |
| License | OPL-1 |
| Website | https://gencbaris.com/odoo_plugins/ |
| Versions | 18.0 19.0 |
DE 2FA / SSO Enforcer
Enforce two-factor authentication and SAML/OIDC single sign-on against the customer's own IdP, with a VAIT/BAIT-style login policy. Community-friendly, BYOK.
German financial-supervision IT guidance (VAIT / BAIT) expects strong authentication and documented access controls. Native SSO is Odoo Enterprise only. This module brings Community-friendly enforcement using the customer's own* identity provider (BYOK):
Key Features
DE SSO/2FA Compliance Record
DE SSO/2FA Compliance Record. Tracks User, Policy, Checked On, Compliant, 2FA Enabled. One-click open vait report.
DE SSO Identity Provider (BYOK)
DE SSO Identity Provider (BYOK). Tracks Entity ID, SSO URL (SAML), IdP x509 Certificate, Issuer URL, Client ID. One-click validate, disable, show metadata.
German financial-supervision IT guidance (VAIT
German financial-supervision IT guidance (VAIT / BAIT) expects strong authentication and documented access controls.
This module brings Community-friendly enforcement
This module brings Community-friendly enforcement using the customer's own* identity provider (BYOK):
Login policy engine (per company
Login policy engine (per company / per group): require 2FA, require SSO, minimum password length, password rotation period (Passwortwechsel), maximum failed attempts before lockout, and an allowed-IP / CIDR list.
BYOK IdP registry: store SAML2
BYOK IdP registry: store SAML2 / OIDC endpoint metadata (entity id, SSO URL, issuer, client id, JWKS URL) for the customer's own IdP.
We validate the configuration format
We validate the configuration format; the customer's existing auth_saml / auth_oauth provider performs the actual authentication.
Per-user enforcement state: which users
Per-user enforcement state: which users satisfy the policy, who is exempt (with a documented reason and expiry), and who is non-compliant.
Use Cases
Screenshots
Apply Login Policy
Compliance Records
Identity Providers
Test Password Strength
Login Policies
Why Choose This Module
Login policy engine (per company / per group): require 2FA, require SSO, minimum password length, password rotation period (Passwortwechsel), maximum failed attempts before lockout, and an allowed-IP / CIDR list. BYOK IdP registry: store SAML2 / OIDC endpoint metadata (entity id, SSO URL, issuer, client id, JWKS URL) for the customer's own IdP. We validate the configuration format; the customer's existing auth_saml / auth_oauth provider performs the actual authentication. Per-user enforcement state: which users satisfy the policy, who is exempt (with a documented reason and expiry), and who is non-compliant. Compliance dashboard with counts and a one-click "force 2FA setup" flag, plus a wizard to apply a policy to a target group. A scheduled job that recomputes compliance and flags users whose password is older than the rotation period.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: OPL-1
- Languages: 35+
- Author: Baris Genc
- Dependencies: base, mail
- Support: odoo@gencbaris.com
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module