needsSessionToRotate should return true if the profile has mfa_serial

99designs · May 17, 2019 · a47b8b9 · a47b8b9
1 parent 6f1fb7a
commit a47b8b9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/vault/rotator.go b/vault/rotator.go
@@ -237,5 +237,8 @@ func (r *Rotator) needsSessionToRotate(profileName string) bool {
 		// TODO: should this comparison be case-insensitive?
 		return true
 	}
+	if sourceProfile.MFASerial != "" {
+		return true
+	}
 	return false
 }