Press Ctrl / CMD + C to copy this to your clipboard.
This post will be reported to the moderators as potential spam to be looked at
I could set the Two Factor authentication in the CMS. Following the documentation: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#notification-when-2fa-is-requested-for-a-user
Now, I would like to know if it is possible to mark this security step as required. The users could choose if can enable or disable it, but I would like to know if exists the possibility to mark this as required, and dont allow to login to the user if this option is not available.
Thanks in advance,
Did you find a way of doing this? Can you share?
Yes, I could complete this task, using the interface
private readonly ITwoFactorLoginService twoFactorLoginService;
and checking if the user has enabled that option:
var twoFactorEnabled = await twoFactorLoginService.IsTwoFactorEnabledAsync(user.Key);
Thanks in advance,
hi Pablo - correct me if wrong, your suggestion above is just to check if its enabled for a given user.
Is there a way to enforce 2FA is required for all users (especially when not already enabled). i.e. 2FA blanket required for all users, meaning that after the username/password login step that the workflow would then show the 2FA setup screen. (unless an Admin has opted a user out of 2FA for some reason, which i acknowledge is a valid use case, in which case the IsTwoFactorEnabled setting would be honoured)
Did you succeed with this task?
hi Alex, no i didn't find a way available in Umbraco to enforce that users go through a 2fa process to log in. To me this should've been an MVP feature of introducing 2fa.
Did you try this package - https://plugins.miniorange.com/umbraco-two-factor-authentication-2fa?
Just curious, because I've just found it, looks like it has this feature
Any update on this?
Update on this?
is working on a reply...
Write your reply to:
Image will be uploaded when post is submitted