TExternalSignInArgs.SkipTwoFactor Property
When set to True, the user is signed in without running Sphinx's own two-factor challenge, fully trusting the upstream provider's authentication. When left False (the default), the sign-in respects the user's normal Sphinx two-factor configuration (e.g.
TUser.TwoFactorEnabled), exactly like an interactive login. Decide this based on what you know about the upstream provider -- for example, after inspecting the amr/acr claims in AuthResult to confirm the upstream already performed multi-factor authentication.
Syntax
Unit: Sphinx.EventArgs
property TExternalSignInArgs.SkipTwoFactor: Boolean