Questions tagged [two-factor-authentication]

Is an approach to authentication which requires the presentation of two or more authentication factors.

Two-factor authentication (TFA, T-FA or 2FA) is an approach to authentication which requires the presentation of two or more of the three authentication factors: a knowledge factor ("something the user knows"), a possession factor ("something the user has"), and an inherence factor ("something the user is").

See also and the Security.StackExchange multi-factor tag.

417 questions
0
votes
0 answers

Two Factor Authentication Proper Implementation (Possible bug found?)

I was writing a web scraper for a previous employer and it required me to login and it also did a two factor authentication if I had never logged in with that user before. Well... what I came to find out was that after passing the token, along with…
0
votes
1 answer

Two Factor Authentication for Rails Application

I'm thinking about adding another layer of security in my application. Two factor authentication (2FA) seems like something I want to work with. I want to know what determines a good 2FA? Also which ones would you recommend? I am currently not on…
levelone
  • 1,769
  • 3
  • 12
  • 17
0
votes
0 answers

Spring Two factor authentication where to save credentials

I'm trying to implement two factor authentication in my Spring application. Desired situation I want the user to first log in with his username and password, if those are correct I want the system to generate a random key and email that to the…
0
votes
1 answer

How to transfer identity and other user information between idp adapters in pingfederate?

I am creating a custom adapter in pingfederate in-between an LDAP Adapter and a pingID adapter for customising the two factor authentication and session management. so I want to get inputs from the first adapter,specifically the username(SAML--…
0
votes
1 answer

what are the factors of authentications that can be used as second factor in ping identity?

I tried out with the ping identity documentation for the last days. What are the factors of authentications that can be used as second factor in ping identity? From where I will get a good example for two factor authentication using pingFederate?
0
votes
0 answers

How can I use my applet on popular mobile devices?

I have a website that uses an applet and corresponding server-side API to authenticate users with a smart card and contact-less card reader. The solution works fine on a desktop environment, however, I would like to take advantage of the NFC…
Totoro53
  • 328
  • 2
  • 16
0
votes
1 answer

Remembering Google Two Factor authentication while clearning cookies

I have enable 2-Factor authentication on google. I want to clear all the cookies in my browser (firefox/iceweasel) at the end of the session while retaining the "remember for 30 days" feature. I've tried rules for retaining specific cookies from…
kabZX
  • 127
  • 3
0
votes
1 answer

Grant Google Access to SMTP on cPanel/WHM Centos Server without advertising SMTP Auth?

A non-stop wave of distributed smtp auth attacks on my server prompted me to ban non specified IPs from connecting to smtp on my server and sending mail though it. Very effective. (instructions: http://sysadmintips.in/advanced/csf/exim) However I…
Claud
  • 785
  • 8
  • 24
0
votes
1 answer

ASP.NET Identity 2.1 2FA configuration

As we are integrating Thinktecture identity server 3 with Microsoft ASP.NET Identity 2.1 we managed to configure and enable 2FA (Tow Factor Authentication) for our clients. The problem is that default implementation of MS uses TOTP and its valid…
0
votes
1 answer

ASP.Net MVC - Two Step Authentication

Good Morning In MVC there is a method in the manage controller being used. to generate a token. var code = await UserManager.GenerateChangePhoneNumberTokenAsync(User.Identity.GetUserId(), model.Number); Does anyone know where this generated token…
0
votes
1 answer

Jenkins User's authorization to deploy

I wanted to have 2-factor authentication in Jenkins for all the users (even super admin) and wanted to know, if it's possible and if it is, what is the possible way or do we need a plugin for it. Plus can we have authorization for scheduling the…
0
votes
3 answers

securely bypass two factor authentication on mobile app

I'm trying to implement two factor authentication via TOTP. I have webapp and mobile applications(ios and android). I want two factor auth flow only on webapp but not on mobile apps. How can I securely bypass two factor auth on only mobile apps ?…
ravi
  • 800
  • 1
  • 11
  • 25
0
votes
1 answer

two factor authentication doesn't work when it is access from applicaiton

I have two applications, one has the web api other and application use it to authenticate it itself. How 2FA implemented in my application is, first get the username and password then authenticate it. After authenticate it I send the username,…
wordpressm
  • 2,971
  • 3
  • 16
  • 29
0
votes
0 answers

Our app using Azure to authenticate Office 365 users is not supporting 2-step authentication

We have a multi-tenant Windows Azure app. We use it to authenticate Office 365 users, and grant us access to the user's calendars. We had a support question today saying: I then click the office 365 button, am taken to the Microsoft Office 365…
Brett C
  • 251
  • 2
  • 11
0
votes
1 answer

How can I change UserManager logic so that user must exist in database before they register

I am customizing the MVC5 registration process so that when users are registering they must enter two custom fields 'MyNewField1' and 'MyNewField2' which will be then checked against the user context to ensure if they exist in which case the…
Jay
  • 2,882
  • 12
  • 43
  • 88