files.com 1.1.634 → 1.1.635

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b76a3d791d7630005f0693bfa612019db8450967e71a51d5dcbc25490f69ceba
-  data.tar.gz: '058e298a21b0e09b89eba4c47f24a6fb7710bae4963a47b96f407193c0076181'
+  metadata.gz: 07c8685ec589f7db545612acbd93062b543ab406d42dff852f97390b849d3002
+  data.tar.gz: 379bdd9123c551efa73ccedce8906454059d005c6011950bc5f1685ec2c4afb9
 SHA512:
-  metadata.gz: dd3d6a587d2a9e278d6cdc9e93b0b5a3d6e9e1e6d3122f4e4b1aa8c67dd14f1f6744119c2e7155ff0c2e94cded1b2550202467971d32fcdd03784814cc1f1667
-  data.tar.gz: 0f9b592090c9fd6eab749a7574798c5b6f229e9689093491eb5a6fb838f781a6eb7bd8c048c95d7a02c95dd830ba74002e7e2d78fbd1db7e1ebd24c37c49899a
+  metadata.gz: 1c0a13e1cb07f617ba3d29f87fe79b3bad5e49de24f8dbeac4c6b89c7acf00ff95e919e54a5ea36b78562c8c07fd831a0cf0eb4be8111a79722e23a366b87b7f
+  data.tar.gz: 948e08d67679243ce4f59d118a67c43148d2c61e022fc5aee4fe51168ffe3ba3238c6698fccf11f7e62a19f331307469d53d800cc4dd73b77147b017f7ab5c76

data/_VERSION

@@ -1 +1 @@
-1.1.634
+1.1.635

data/docs/site.md

@@ -175,6 +175,7 @@
   "prevent_root_permissions_for_non_site_admins": true,
   "protocol_access_groups_only": true,
   "require_2fa": true,
+  "require_2fa_exempt_all_sso_users": true,
   "require_2fa_stop_time": "2000-01-01T01:00:00Z",
   "revoke_bundle_access_on_disable_or_delete": true,
   "require_2fa_user_type": "`site_admins`",
@@ -485,6 +486,7 @@
 * `prevent_root_permissions_for_non_site_admins` (boolean): If true, we will prevent non-administrators from receiving any permissions directly on the root folder.  This is commonly used to prevent the accidental application of permissions.
 * `protocol_access_groups_only` (boolean): If true, protocol access permissions on users will be ignored, and only protocol access permissions set on Groups will be honored.  Make sure that your current user is a member of a group with API permission when changing this value to avoid locking yourself out of your site.
 * `require_2fa` (boolean): Require two-factor authentication for all users?
+* `require_2fa_exempt_all_sso_users` (boolean): If true, SSO users using the default user-level two-factor authentication setting are exempt from the site-wide two-factor authentication requirement.
 * `require_2fa_stop_time` (date-time): If set, requirement for two-factor authentication has been scheduled to end on this date-time.
 * `revoke_bundle_access_on_disable_or_delete` (boolean): Auto-removes bundles for disabled/deleted users and enforces bundle expiry within user access period.
 * `require_2fa_user_type` (string): What type of user is required to use two-factor authentication (when require_2fa is set to `true` for this site)?
@@ -685,6 +687,7 @@ Files::Site.update(
   allowed_2fa_method_static: false, 
   allowed_2fa_method_bypass_for_ftp_sftp_dav: false, 
   require_2fa: false, 
+  require_2fa_exempt_all_sso_users: false, 
   require_2fa_user_type: "`site_admins`", 
   color2_top: "#000000", 
   color2_left: "#0066a7", 
@@ -860,6 +863,7 @@ Files::Site.update(
 * `allowed_2fa_method_static` (boolean): Is OTP via static codes for two factor authentication allowed?
 * `allowed_2fa_method_bypass_for_ftp_sftp_dav` (boolean): Are users allowed to configure their two factor authentication to be bypassed for FTP/SFTP/WebDAV?
 * `require_2fa` (boolean): Require two-factor authentication for all users?
+* `require_2fa_exempt_all_sso_users` (boolean): If true, SSO users using the default user-level two-factor authentication setting are exempt from the site-wide two-factor authentication requirement.
 * `require_2fa_user_type` (string): What type of user is required to use two-factor authentication (when require_2fa is set to `true` for this site)?
 * `color2_top` (string): Top bar background color
 * `color2_left` (string): Page link and button color

data/docs/sso_strategy.md

@@ -95,7 +95,7 @@
 * `provision_sftp_permission` (boolean): Auto-provisioned users get SFTP permission?
 * `provision_time_zone` (string): Default time zone for auto provisioned users.
 * `provision_company` (string): Default company for auto provisioned users.
-* `provision_require_2fa` (string): 2FA required setting for auto provisioned users.
+* `provision_require_2fa` (string): 2FA required setting for auto provisioned users. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
 * `provision_filesystem_layout` (string): File System layout to use for auto provisioned users.
 * `provider_identifier` (string): URL-friendly, unique identifier for Azure SAML configuration
 * `ldap_base_dn` (string): Base DN for looking up users in LDAP server

data/docs/user.md

@@ -150,7 +150,7 @@
 * `notify_on_all_sync_failures` (boolean): Should the user receive sync failures via email?
 * `notify_on_all_automation_failures` (boolean): Should the user receive automation failures via email?
 * `notify_on_all_expectation_failures` (boolean): Should the user receive expectation failures and misses via email?
-* `require_2fa` (string): 2FA required setting
+* `require_2fa` (string): 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
 * `require_login_by` (date-time): Require user to login by specified date otherwise it will be disabled.
 * `active_2fa` (boolean): Is 2fa active for the user?
 * `require_password_change` (boolean): Is a password change required upon next user login?
@@ -354,7 +354,7 @@ Files::User.create(
 * `ssl_required` (string): SSL required setting
 * `sso_strategy_id` (int64): SSO (Single Sign On) strategy ID for the user, if applicable.
 * `subscribe_to_newsletter` (boolean): Is the user subscribed to the newsletter?
-* `require_2fa` (string): 2FA required setting
+* `require_2fa` (string): 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
 * `tags` (string): Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
 * `time_zone` (string): User time zone
 * `user_root` (string): Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.
@@ -530,7 +530,7 @@ Files::User.update(id,
 * `ssl_required` (string): SSL required setting
 * `sso_strategy_id` (int64): SSO (Single Sign On) strategy ID for the user, if applicable.
 * `subscribe_to_newsletter` (boolean): Is the user subscribed to the newsletter?
-* `require_2fa` (string): 2FA required setting
+* `require_2fa` (string): 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
 * `tags` (string): Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
 * `time_zone` (string): User time zone
 * `user_root` (string): Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.
@@ -732,7 +732,7 @@ user.update(
 * `ssl_required` (string): SSL required setting
 * `sso_strategy_id` (int64): SSO (Single Sign On) strategy ID for the user, if applicable.
 * `subscribe_to_newsletter` (boolean): Is the user subscribed to the newsletter?
-* `require_2fa` (string): 2FA required setting
+* `require_2fa` (string): 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
 * `tags` (string): Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
 * `time_zone` (string): User time zone
 * `user_root` (string): Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.

data/lib/files.com/models/site.rb

@@ -699,6 +699,11 @@ module Files
       @attributes[:require_2fa]
     end
 
+    # boolean - If true, SSO users using the default user-level two-factor authentication setting are exempt from the site-wide two-factor authentication requirement.
+    def require_2fa_exempt_all_sso_users
+      @attributes[:require_2fa_exempt_all_sso_users]
+    end
+
     # date-time - If set, requirement for two-factor authentication has been scheduled to end on this date-time.
     def require_2fa_stop_time
       @attributes[:require_2fa_stop_time]
@@ -1081,6 +1086,7 @@ module Files
     #   allowed_2fa_method_static - boolean - Is OTP via static codes for two factor authentication allowed?
     #   allowed_2fa_method_bypass_for_ftp_sftp_dav - boolean - Are users allowed to configure their two factor authentication to be bypassed for FTP/SFTP/WebDAV?
     #   require_2fa - boolean - Require two-factor authentication for all users?
+    #   require_2fa_exempt_all_sso_users - boolean - If true, SSO users using the default user-level two-factor authentication setting are exempt from the site-wide two-factor authentication requirement.
     #   require_2fa_user_type - string - What type of user is required to use two-factor authentication (when require_2fa is set to `true` for this site)?
     #   color2_top - string - Top bar background color
     #   color2_left - string - Page link and button color

data/lib/files.com/models/sso_strategy.rb

@@ -189,7 +189,7 @@ module Files
       @attributes[:provision_company]
     end
 
-    # string - 2FA required setting for auto provisioned users.
+    # string - 2FA required setting for auto provisioned users. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
     def provision_require_2fa
       @attributes[:provision_require_2fa]
     end

data/lib/files.com/models/user.rb

@@ -518,7 +518,7 @@ module Files
       @attributes[:notify_on_all_expectation_failures] = value
     end
 
-    # string - 2FA required setting
+    # string - 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
     def require_2fa
       @attributes[:require_2fa]
     end
@@ -959,7 +959,7 @@ module Files
     #   ssl_required - string - SSL required setting
     #   sso_strategy_id - int64 - SSO (Single Sign On) strategy ID for the user, if applicable.
     #   subscribe_to_newsletter - boolean - Is the user subscribed to the newsletter?
-    #   require_2fa - string - 2FA required setting
+    #   require_2fa - string - 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
     #   tags - string - Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
     #   time_zone - string - User time zone
     #   user_root - string - Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.
@@ -1150,7 +1150,7 @@ module Files
     #   ssl_required - string - SSL required setting
     #   sso_strategy_id - int64 - SSO (Single Sign On) strategy ID for the user, if applicable.
     #   subscribe_to_newsletter - boolean - Is the user subscribed to the newsletter?
-    #   require_2fa - string - 2FA required setting
+    #   require_2fa - string - 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
     #   tags - string - Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
     #   time_zone - string - User time zone
     #   user_root - string - Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.
@@ -1289,7 +1289,7 @@ module Files
     #   ssl_required - string - SSL required setting
     #   sso_strategy_id - int64 - SSO (Single Sign On) strategy ID for the user, if applicable.
     #   subscribe_to_newsletter - boolean - Is the user subscribed to the newsletter?
-    #   require_2fa - string - 2FA required setting
+    #   require_2fa - string - 2FA required setting. `use_system_setting` uses the site-wide setting, including SSO exemptions. `always_require` and `never_require` override the site-wide setting when user-level overrides are allowed.
     #   tags - string - Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags.  Tags must only contain lowercase letters, numbers, and hyphens.
     #   time_zone - string - User time zone
     #   user_root - string - Root folder for FTP (and optionally SFTP if the appropriate site-wide setting is set).  Note that this is not used for API, Desktop, or Web interface.

data/lib/files.com/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Files
-  VERSION = "1.1.634"
+  VERSION = "1.1.635"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: files.com
 version: !ruby/object:Gem::Version
-  version: 1.1.634
+  version: 1.1.635
 platform: ruby
 authors:
 - files.com
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-06-04 00:00:00.000000000 Z
+date: 2026-06-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable