| Summary: | Support for DuoSecurity 2FA Authentication | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Tom Misilo <tmisilo> |
| Component: | Authentication | Assignee: | Galen Charlton <gmcharlt> |
| Status: | CLOSED WONTFIX | QA Contact: | Testopia <testopia> |
| Severity: | enhancement | ||
| Priority: | P5 - low | CC: | black23, dcook, dpavlin, josef.moravec, magnus, rbit |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| See Also: | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20476 | ||
| Change sponsored?: | --- | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Bug Depends on: | |||
| Bug Blocks: | 20476 | ||
|
Description
Tom Misilo
2015-06-03 02:47:07 UTC
I vote +1 for 2FA Authentication. It'll be very useful for GDPR. My favorites solutions Gluu/SuperGluu https://super.gluu.org/ LinOTP http://www.linotp.org/, https://github.com/LinOTP/LinOTP PrivacyIdea https://github.com/privacyidea/privacyidea Some other solutions: https://github.com/j256/perl-two-factor-auth/blob/master/totp.pl https://debian-administration.org/article/729/Implementing_two_factor_authentication_with_perl https://token2.com/?content=motpqr Definitely +1 for 2 factor auth! If at all possible it would probably be nice to make it pluggable, to make it easy to add more two factor methods? Anyone want to crowdsource funding for this? I'd gladly chip in! Koha now supports 2FA for the staff interface now. It's possible to use different Apps and email. The linked repository is deprecated: Deprecation Notice This repository is deprecated by Duo Security. The repository will remain public and visible, and integrations built using this repository’s code will continue to work. You can also continue to fork, clone, or pull from this repository. It looks like DuoSecurity is also not free to use. I am marking this as WONTFIX, please reopen if you disagree. Duo is free for up to 10 users, but it is a popular solution for MFA with business and higher education. It looks like the perl library has been replaced with https://github.com/duosecurity/duo_api_perl I don't have a horse in the race anymore, but just wanted to provided up info incase someone is looking to implement it locally. Duo is pretty good. I've used it before but haven't had any library demand for it. |