As a System Admin, I can disable any type of login to Liferay

• Type: Story
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security > Login/Sign in Portlet, Portal Configuration > System Settings
• Labels:
  • out-of-scope

Motivation:

Certain operations such as backup generation previous to an upgrade or migration require "freezing" the content to ensure data are not lost. Currently, the alternatives are:

Shutting down the system: this makes new data generation impossible, but makes the sites completely unavailable.
Disabling login (e.g. through ENV variable LIFERAY_AUTH_PERIOD_LOGIN_PERIOD_DISABLED=true or its equivalent portal property): this prevents access from regular login, but login via SAML or content creation via API is still possible.

See PTR-2279 for further discussion.

Acceptance Criteria:

• Given the LIFERAY_AUTH_PERIOD_LOGIN_PERIOD_DISABLED (or its corresponding portal property) is set to true, then:
  • login via UI is disabled (current behavior)
  • authenticated API operations are disabled (new behavior). 
  • login via SSO (e.g., with SAML) is disabled (new behavior)