Bug 14319 - Support for DuoSecurity 2FA Authentication
Summary: Support for DuoSecurity 2FA Authentication
Status: RESOLVED WONTFIX
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement (vote)
Assignee: Galen Charlton
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks: 20476
  Show dependency treegraph
 
Reported: 2015-06-03 02:47 UTC by Tom Misilo
Modified: 2023-08-06 23:36 UTC (History)
6 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tom Misilo 2015-06-03 02:47:07 UTC
Hi,

If possible / feasible I think it would be awesome if we could enable two factor authentication for the staff client, since there is a lot of personal data that can be stored inside of Koha.

Here is a perl library from Duo: https://github.com/duosecurity/duo_perl

Thanks!
Comment 2 Magnus Enger 2018-03-07 07:30:13 UTC
Definitely +1 for 2 factor auth! If at all possible it would probably be nice to make it pluggable, to make it easy to add more two factor methods? Anyone want to crowdsource funding for this? I'd gladly chip in!
Comment 3 Katrin Fischer 2023-08-05 11:38:37 UTC
Koha now supports 2FA for the staff interface now. It's possible to use different Apps and email. 

The linked repository is deprecated:

Deprecation Notice

This repository is deprecated by Duo Security. The repository will remain public and visible, and integrations built using this repository’s code will continue to work. You can also continue to fork, clone, or pull from this repository.

It looks like DuoSecurity is also not free to use. 

I am marking this as WONTFIX, please reopen if you disagree.
Comment 4 Tom Misilo 2023-08-05 12:07:26 UTC
Duo is free for up to 10 users, but it is a popular solution for MFA with business and higher education.

It looks like the perl library has been replaced with https://github.com/duosecurity/duo_api_perl

I don't have a horse in the race anymore, but just wanted to provided up info incase someone is looking to implement it locally.
Comment 5 David Cook 2023-08-06 23:36:25 UTC
Duo is pretty good. I've used it before but haven't had any library demand for it.