Description

Allow the admin to enforce 2fa usage. A 2fa app must be installed and enabled, otherwise this setting will be ignored and all the users will able to login normally.
The admin can also exclude certain groups from the 2fa enforcement. The users belonging to those groups won't have the 2fa enforced, but they can still use 2fa if they want.

Related Issue

https://github.com/owncloud/enterprise/issues/5219

Motivation and Context

How Has This Been Tested?

Manually tested along with the "twofactor_totp" app

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Database schema changes (next release will require increase of minor version instead of patch)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests only (no source changes)

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation ticket raised:
• Changelog item, see TEMPLATE