I could set the Two Factor authentication in the CMS. Following the documentation: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#notification-when-2fa-is-requested-for-a-user
Now, I would like to know if it is possible to mark this security step as required. The users could choose if can enable or disable it, but I would like to know if exists the possibility to mark this as required, and dont allow to login to the user if this option is not available.
Thanks in advance,
hi Pablo - correct me if wrong, your suggestion above is just to check if its enabled for a given user.
Is there a way to enforce 2FA is required for all users (especially when not already enabled). i.e. 2FA blanket required for all users, meaning that after the username/password login step that the workflow would then show the 2FA setup screen. (unless an Admin has opted a user out of 2FA for some reason, which i acknowledge is a valid use case, in which case the IsTwoFactorEnabled setting would be honoured)
hi Alex, no i didn't find a way available in Umbraco to enforce that users go through a 2fa process to log in. To me this should've been an MVP feature of introducing 2fa.
2FA Marked as Required
Dear all,
I could set the Two Factor authentication in the CMS. Following the documentation: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#notification-when-2fa-is-requested-for-a-user Now, I would like to know if it is possible to mark this security step as required. The users could choose if can enable or disable it, but I would like to know if exists the possibility to mark this as required, and dont allow to login to the user if this option is not available. Thanks in advance,
Hi Pablo
Did you find a way of doing this? Can you share?
Thanks, Alex
Hi Alex, Yes, I could complete this task, using the interface
and checking if the user has enabled that option:
Thanks in advance,
hi Pablo - correct me if wrong, your suggestion above is just to check if its enabled for a given user.
Is there a way to enforce 2FA is required for all users (especially when not already enabled). i.e. 2FA blanket required for all users, meaning that after the username/password login step that the workflow would then show the 2FA setup screen. (unless an Admin has opted a user out of 2FA for some reason, which i acknowledge is a valid use case, in which case the IsTwoFactorEnabled setting would be honoured)
thanks
Hi Andrew,
Did you succeed with this task?
Alex
hi Alex, no i didn't find a way available in Umbraco to enforce that users go through a 2fa process to log in. To me this should've been an MVP feature of introducing 2fa.
Hi Andrew,
Agree )
Did you try this package - https://plugins.miniorange.com/umbraco-two-factor-authentication-2fa?
Just curious, because I've just found it, looks like it has this feature
Thanks, Alex
Any update on this?
Update on this?
is working on a reply...