Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Pablo A. 2 posts 22 karma points
    Jan 30, 2023 @ 19:32
    Pablo A.
    0

    Dear all,

    I could set the Two Factor authentication in the CMS. Following the documentation: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#notification-when-2fa-is-requested-for-a-user Now, I would like to know if it is possible to mark this security step as required. The users could choose if can enable or disable it, but I would like to know if exists the possibility to mark this as required, and dont allow to login to the user if this option is not available. Thanks in advance,

  • Alex Skrypnyk 6132 posts 23951 karma points MVP 7x admin c-trib
    Apr 04, 2023 @ 14:27
    Alex Skrypnyk
    0

    Hi Pablo

    Did you find a way of doing this? Can you share?

    Thanks, Alex

  • Pablo A. 2 posts 22 karma points
    Apr 12, 2023 @ 06:53
    Pablo A.
    0

    Hi Alex, Yes, I could complete this task, using the interface

    private readonly ITwoFactorLoginService twoFactorLoginService;
    

    and checking if the user has enabled that option:

    var twoFactorEnabled = await twoFactorLoginService.IsTwoFactorEnabledAsync(user.Key);
    

    Thanks in advance,

  • andrew shearer 506 posts 653 karma points
    Sep 21, 2023 @ 23:02
    andrew shearer
    0

    hi Pablo - correct me if wrong, your suggestion above is just to check if its enabled for a given user.

    Is there a way to enforce 2FA is required for all users (especially when not already enabled). i.e. 2FA blanket required for all users, meaning that after the username/password login step that the workflow would then show the 2FA setup screen. (unless an Admin has opted a user out of 2FA for some reason, which i acknowledge is a valid use case, in which case the IsTwoFactorEnabled setting would be honoured)

    thanks

  • Alex Skrypnyk 6132 posts 23951 karma points MVP 7x admin c-trib
    Nov 07, 2023 @ 17:48
    Alex Skrypnyk
    0

    Hi Andrew,

    Did you succeed with this task?

    Alex

  • andrew shearer 506 posts 653 karma points
    Nov 07, 2023 @ 20:05
    andrew shearer
    100

    hi Alex, no i didn't find a way available in Umbraco to enforce that users go through a 2fa process to log in. To me this should've been an MVP feature of introducing 2fa.

  • Alex Skrypnyk 6132 posts 23951 karma points MVP 7x admin c-trib
    Nov 08, 2023 @ 12:07
    Alex Skrypnyk
    0

    Hi Andrew,

    Agree )

    Did you try this package - https://plugins.miniorange.com/umbraco-two-factor-authentication-2fa?

    Just curious, because I've just found it, looks like it has this feature

    Thanks, Alex

  • Jay 416 posts 642 karma points
    Oct 24, 2023 @ 11:26
    Jay
    0

    Any update on this?

  • Alex Skrypnyk 6132 posts 23951 karma points MVP 7x admin c-trib
    Nov 07, 2023 @ 17:47
    Alex Skrypnyk
    0

    Update on this?

Please Sign in or register to post replies

Write your reply to:

Draft