Two Factor Authentication

Adds an extra layer of security to the October CMS backend.

Back to Two Factor Authentication Support

jan-vince
jan-vince

Hi,

I have a problem set up 2FA with MS Authenticator for several October installations on the same domain (like domain.com/en, domain.com/de - there are separate October installations in each locale folder).

2FA works with Google Authentivator, but MS Authenticator allows only one instance for domain (and overwrite previous when I try to 2FA for the second October).

Can you help me with this?

VDLP
VDLP

Hi Jan Vince,

I'm not sure how this plugin could help you with that. The only thing the plugin is responsible for is storing the key for the OTP password to validate.

How does the MS Authenticator detect multiple instances?

jan-vince
jan-vince

Hi,

the problem is, that both - Google Auth and MS Auth - store the key for a domain name (eg. www.domain.com).

In Google Auth I store token for any amount of instances on same domain and I can also rename the name, so I can distinguish between instaces (eg. www.domain.com/en, www.domain.com/cs).

But in MS Auth there is no such option to rename the domain and MS Auth allows only one instance for a domain (when I tried to add token for a second instace the first one was overwritten).

Is there any option you can send custom URL when requesting new token from MS Authenticator?

VDLP
VDLP

Where do they get the domain name or URL from?

jan-vince
jan-vince

Probably from http request when the service verify Secret key vs Authentication code?

jan-vince
jan-vince

For anyone with same problem: I have been able to use MS Authenticator with several October installations on the same domain by changing user emails on each installation (users need to have different email addresses).

1-6 of 6