What technical methods can be implemented to force Nextcloud Pi users from sharing authentication credentials? For example, In the military, this is halted with a certificates held in a smartchip in the ID (CAC) card. Ideally users would have discentive to share a credential: credential resuse (FB / Google).

Update: Maybe EMV (Chip and PIN) can be used as part of 2-factor authentication: I suspect most people not want to loan out their bank card.

Any edits to sharpen (reduce the scope) of the question is appreciated.

  • Nextcloud can do OpenID, OAuth2 and SAML so you can use any MFA provider which supports this. – Steffen Ullrich Dec 8 '19 at 17:52
  • Are you looking for a technical solution or a policy solution? Because credential sharing is very much a "people problem", so attempting to throw more tech at it will not work. – MechMK1 Dec 8 '19 at 18:36
  • Agreed with MechMK1, you should take care of the proper side of the problem, which in your case is the users. – Overmind Dec 9 '19 at 9:46
  • @MechMK1 For this exercise, a technical solution is to be explored. Assume that users have been asked not to share credentials. If the existing tech is not effective, then "it is what it is" – gatorback Dec 9 '19 at 15:50
  • Smart cards can be shared easily. If it's just a classroom exercise, then biometrics would probably be the best answer, assuming you're not worried about users creating fake fingers to share credentials. – user Dec 9 '19 at 16:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.