Questions tagged [two-factor-authentication]

Is an approach to authentication which requires the presentation of two or more authentication factors.

Two-factor authentication (TFA, T-FA or 2FA) is an approach to authentication which requires the presentation of two or more of the three authentication factors: a knowledge factor ("something the user knows"), a possession factor ("something the user has"), and an inherence factor ("something the user is").

See also and the Security.StackExchange multi-factor tag.

417 questions
0
votes
1 answer

Resend SMS code with Django Two-factor Authentication

I'm using Django with django-two-factor-auth for my web application. I can now send SMS via Twilio and verify it, but I haven't figured out how to resend the SMS code when I need i.e. click on "Didn't received your code? Resend!". I have read…
Luan Nguyen
  • 803
  • 6
  • 14
0
votes
1 answer

fosuserbundle ldap configuration for strange use case

I'm trying to create a fosuserbundle for a quite strange use case, which is mandatory requirement, so no space to diplomacy. Use case is as follow: users in a mongo db table populated by jms messages -no registration form users log in by ldap user…
0
votes
2 answers

ASP.NET MVC 5 Identity 2.0 & OWIN Two Factor Authentication by using existing DB

I've just started with MVC after working on Web Forms for 4 years. I've watched few videos explaining the architecture/fundamentals and I'm now able to replicate few modules of my old project with MVC5 using EF6. I've a SQL Server DB containing…
Dev
  • 947
  • 1
  • 13
  • 31
0
votes
1 answer

Two-factor authentication with CAS

I’ve been asked to modify our CAS instance to have a second factor authentication For us it’s easy to send an email or sms to the users. So a custom OTP will be welcomed. We’re not interested in a second instance of CAS. Also we need the next…
virilo
  • 139
  • 1
  • 10
0
votes
0 answers

Multi-step MFA with custom ADFS 3.0 IAuthenticationAdapter

I'm setting up custom MFA providers for ADFS 3.0 by implementing IAuthenticationAdapter, I want to add another step in to the authentication process whereby, for example with email-based OTP, the user is first prompted to confirm his or her email…
0
votes
1 answer

Enabling/disabling two-factor authentication in runtime

we have openAM set up with two-factor authentication using one time SMS code which worked fine up till now. Unfortunately the requirements from the client's side have changed and we would like to be able to disable/enable two-factor authentication…
0
votes
0 answers

Unable to install heroku-two-factor CLI plugin

I just joined the heroku 2fa beta and after activating it, the docs say to do: $ heroku plugins:install git@github.com:heroku/heroku-two-factor.git` But unfortunately I recieve the error message Installing heroku-two-factor… failed! Could not…
0
votes
1 answer

How to implement a custom method as User.Identity.GetLastUserToken() to get last assigned token in two-factor authentication?

I implement two-factor authetentication as seen in http://blogs.msdn.com/b/webdev/archive/2014/02/18/adding-two-factor-authentication-to-an-application-using-asp-net-identity.aspx but I would like show to user in templete view a TokenViewModel…
0
votes
1 answer

Joomla - Two Factor Authentication - Opt-in

Currently, it appears that Joomla has an opt-in 2FA implementation. Is it possible to force our users to use 2FA login?
casey
  • 28
  • 3
  • 6
0
votes
1 answer

Can I have a "Forgot your password?" mechanism when using 2-factor authentication?

After some research I have implemented a solid "Forgot your password?" mechanism, and now I wanted to implement 2FA. But now I'm thinking, what's the point of 2FA (password + email or SMS), if you can recover your account with the "Forgot your…
ChocoDeveloper
  • 12,930
  • 19
  • 74
  • 113
0
votes
1 answer

Why Two Factor Authentication GeneratePin the wrong code?

I've implemented the code from http://satalketo.com/2013/09/mvc-two-factor-authentication/ Two Factor Authentication in ASP.NET MVC when user register he gets a Secret Key and shown a QRcode he can scan to Google Authenticator, all works fine and…
0
votes
1 answer

Gemalto OTP Tokens with NodeJS

Are there any NodeJS modules that will allow me to authenticate against the Gemalto IDProve 100 OTP tokens? I have one of these from Amazon, and I thought the beauty of this device was that it didn't need to be attached to a server: you simply…
Danny Ackerman
  • 799
  • 1
  • 8
  • 22
-1
votes
1 answer

How to Automate Microsoft Authenticator using Selenium?

Here I will be entering my username Usernamepage Next I will enter my password PasswordPage After the Click on “Sign on” , user will be directed to page which user would have given either two types of Authenication either through OTP (which is…
-1
votes
1 answer

Setting up two-factor authentication with Github, no longer lets me enter a password

After setting up two-factor authentication on GitHub, I am no longer able to enter my password as you can see on this screenshot.
-1
votes
1 answer

Handling expiration & validation of 2FA codes

I am currently planning a 2FA implementation to require users to provide a code via SMS for some actions, like a login. I will also use tools like Google Authenticator, but I do not want the users to force to download the app, thats why I need to…
Felix Hagspiel
  • 1,827
  • 2
  • 18
  • 29
1 2 3
27
28