This extension adds support for two factor authentication using several different security keys. Currently, the following security keys are available by default:
- U2F (See below)
- Google authenticator (Or compatible)
- Backup keys
New type of keys can be added by following the instructions in the documentation.
You can set several options within this extension:
- Disable 2FA completly (Basicly disabling the extension!)
- Do not require 2FA, but give it as option to users
- Require 2FA for users with a_ permissions only, and only to login for the ACP
- Require 2FA for users with a_ permissions only
- Require 2FA for users with a_ or m_ permissions only
- Require 2FA for all users
Depending on the choosen setting 2FA, the board will be limit available for the user if a 2FA key is required.
Only when the option Do not require 2FA, but give it as option to users is selected, the board won't be limited.
Currently, the browser support for U2F is limited:
Supported:
- Google Chrome (Version 41 and later)
Not supported:
- Safari
- Firefox (Not supported yet. Support will be added in a upcoming release)
- Internet Explorer
- Edge
Test if your browser supports U2F
You will need a U2F capable security key for this to work. Yubico (and others) does provide them.
Besides the browser requirements, U2F requires that your board runs under SSL. Without SSL the U2F key won't work, and you will not be able to select this type of key to add. This is a limitation from U2F.
Please note that this extension currently is build on the U2F protocol, and doesn't support the new WebAuthn yet. Support for WebAuthn might be added later (Including extra browser support).
Download the latest release and and extract the download to ext/paul999/tfa/ and enable it
Disable the extension in your ACP, extra the zip to ext/paul999/tfa and enable it
Please create a PR on the master branch. Only translations submitted by PR are accepted. I will start merging translation PRs when stable versions are going to be released. Incomplete translations at that point won't be merged.
Bugs and feature requests can be made at the github issue tracker.