Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Pablo A. 2 posts 22 karma points
    Jan 30, 2023 @ 19:32
    Pablo A.
    0

    2FA Marked as Required

    Dear all,

    I could set the Two Factor authentication in the CMS. Following the documentation: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#notification-when-2fa-is-requested-for-a-user Now, I would like to know if it is possible to mark this security step as required. The users could choose if can enable or disable it, but I would like to know if exists the possibility to mark this as required, and dont allow to login to the user if this option is not available. Thanks in advance,

  • Alex Skrypnyk 6182 posts 24284 karma points MVP 9x admin c-trib
    Apr 04, 2023 @ 14:27
    Alex Skrypnyk
    0

    Hi Pablo

    Did you find a way of doing this? Can you share?

    Thanks, Alex

  • Pablo A. 2 posts 22 karma points
    Apr 12, 2023 @ 06:53
    Pablo A.
    0

    Hi Alex, Yes, I could complete this task, using the interface

    private readonly ITwoFactorLoginService twoFactorLoginService;
    

    and checking if the user has enabled that option:

    var twoFactorEnabled = await twoFactorLoginService.IsTwoFactorEnabledAsync(user.Key);
    

    Thanks in advance,

  • andrew shearer 513 posts 663 karma points
    Sep 21, 2023 @ 23:02
    andrew shearer
    0

    hi Pablo - correct me if wrong, your suggestion above is just to check if its enabled for a given user.

    Is there a way to enforce 2FA is required for all users (especially when not already enabled). i.e. 2FA blanket required for all users, meaning that after the username/password login step that the workflow would then show the 2FA setup screen. (unless an Admin has opted a user out of 2FA for some reason, which i acknowledge is a valid use case, in which case the IsTwoFactorEnabled setting would be honoured)

    thanks

  • Alex Skrypnyk 6182 posts 24284 karma points MVP 9x admin c-trib
    Nov 07, 2023 @ 17:48
    Alex Skrypnyk
    0

    Hi Andrew,

    Did you succeed with this task?

    Alex

  • andrew shearer 513 posts 663 karma points
    Nov 07, 2023 @ 20:05
    andrew shearer
    100

    hi Alex, no i didn't find a way available in Umbraco to enforce that users go through a 2fa process to log in. To me this should've been an MVP feature of introducing 2fa.

  • Alex Skrypnyk 6182 posts 24284 karma points MVP 9x admin c-trib
    Nov 08, 2023 @ 12:07
    Alex Skrypnyk
    0

    Hi Andrew,

    Agree )

    Did you try this package - https://plugins.miniorange.com/umbraco-two-factor-authentication-2fa?

    Just curious, because I've just found it, looks like it has this feature

    Thanks, Alex

  • Jay 425 posts 652 karma points
    Oct 24, 2023 @ 11:26
    Jay
    0

    Any update on this?

  • Alex Skrypnyk 6182 posts 24284 karma points MVP 9x admin c-trib
    Nov 07, 2023 @ 17:47
    Alex Skrypnyk
    0

    Update on this?

  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" button below.

    Continue discussion

Please Sign in or register to post replies