Hi, If possible / feasible I think it would be awesome if we could enable two factor authentication for the staff client, since there is a lot of personal data that can be stored inside of Koha. Here is a perl library from Duo: https://github.com/duosecurity/duo_perl Thanks!
I vote +1 for 2FA Authentication. It'll be very useful for GDPR. My favorites solutions Gluu/SuperGluu https://super.gluu.org/ LinOTP http://www.linotp.org/, https://github.com/LinOTP/LinOTP PrivacyIdea https://github.com/privacyidea/privacyidea Some other solutions: https://github.com/j256/perl-two-factor-auth/blob/master/totp.pl https://debian-administration.org/article/729/Implementing_two_factor_authentication_with_perl https://token2.com/?content=motpqr
Definitely +1 for 2 factor auth! If at all possible it would probably be nice to make it pluggable, to make it easy to add more two factor methods? Anyone want to crowdsource funding for this? I'd gladly chip in!
Koha now supports 2FA for the staff interface now. It's possible to use different Apps and email. The linked repository is deprecated: Deprecation Notice This repository is deprecated by Duo Security. The repository will remain public and visible, and integrations built using this repository’s code will continue to work. You can also continue to fork, clone, or pull from this repository. It looks like DuoSecurity is also not free to use. I am marking this as WONTFIX, please reopen if you disagree.
Duo is free for up to 10 users, but it is a popular solution for MFA with business and higher education. It looks like the perl library has been replaced with https://github.com/duosecurity/duo_api_perl I don't have a horse in the race anymore, but just wanted to provided up info incase someone is looking to implement it locally.
Duo is pretty good. I've used it before but haven't had any library demand for it.