Support for 2FA-Auth #8453
-
|
How about 2FA support on login page? (Yubico, Google authenticator etc.) |
Beta Was this translation helpful? Give feedback.
Replies: 18 comments 13 replies
-
|
Closing this as a dupe of #1471. Feel free to add additional thoughts/comments over there. |
Beta Was this translation helpful? Give feedback.
-
|
Could be argued that 2FA should be an option in core, without requiring a plugin that provides a custom login form. |
Beta Was this translation helpful? Give feedback.
-
|
Yes, the intention was, to support 2FA on login without any external plugin. |
Beta Was this translation helpful? Give feedback.
-
|
Right now i'm refactoring our 2FA plugin for Craft 3 (it was written for Craft 2). I'll give an update when it's done. https://github.com/born05/craft-twofactorauthentication |
Beta Was this translation helpful? Give feedback.
-
|
@MDXDave the Craft 3 version of our 2FA plugin is in beta. |
Beta Was this translation helpful? Give feedback.
-
|
I'd also like to see this in core. 2FA is a mandatory precaution these days :) |
Beta Was this translation helpful? Give feedback.
-
|
@brandonkelly Is there any movement on this? Just wondering the likelihood of it ending up being pushed back again? Cheers! |
Beta Was this translation helpful? Give feedback.
-
|
@stevenjwright I can’t promise exactly when we’ll get to it, but we have our own internal needs for it so it’ll happen sooner than later. |
Beta Was this translation helpful? Give feedback.
-
|
Hello there - any update on when this will be added? will it be in 4.0? |
Beta Was this translation helpful? Give feedback.
-
|
That’s the current plan. |
Beta Was this translation helpful? Give feedback.
-
|
@brandonkelly i'm both happy and sad to read this. ;) |
Beta Was this translation helpful? Give feedback.
-
|
Since this is on the menu right now, I wanted to request that the two-factor methods supported include TOTP (e.g. Authy and Google Authenticator) and FIDO U2F (e.g. Yubikey, Titan) Related: Browser support for FIDO U2F API |
Beta Was this translation helpful? Give feedback.
-
|
@Mosnar Not to re-iterate, but that is the current plan :) |
Beta Was this translation helpful? Give feedback.
-
|
Does this mean 2FA is no longer on the roadmap for 4.0? Or that it has been completed? |
Beta Was this translation helpful? Give feedback.
-
|
It's currently in an MVP state on a branch and will definitely be a part of 4.0 |
Beta Was this translation helpful? Give feedback.
-
|
I can't see this in the 4.0 beta release notes. I guess this means 2FA did not make it into 4.0? |
Beta Was this translation helpful? Give feedback.
-
|
@admanami sorry, but no. It's still in an almost finished stage, though. The reason it got bumped to 4.1 was to have the chance of wrapping up the filesystem and image transformer changes. The latter changes are breaking changes for plugins, while the auth changes are not. So, the filesystem and the like changes had to be part of 4.0, while auth could also be part of 4.1. In that situation, we had to prioritise the asset stuff over auth stuff. |
Beta Was this translation helpful? Give feedback.
-
|
Is this feature still scheduled for a 4.x release. It is not in the roadmap at all, just interested to know |
Beta Was this translation helpful? Give feedback.
-
|
We’ve gone back to the drawing board with it, so can’t comment on when exactly it’ll be released. |
Beta Was this translation helpful? Give feedback.
-
|
I just wanted to check in on this feature and see if it can make it back onto the roadmap, as it's a serious show-stopper for some clients (especially those with deeper pockets). |
Beta Was this translation helpful? Give feedback.
-
|
Personally I feel this should be prioritised as it is pretty essential. After several years, we could not wait any longer and went with Cloudflare ZT Access instead, but it would be good to see this in the core product. |
Beta Was this translation helpful? Give feedback.
-
|
I’m not sure how much more we can prioritize something we’re already working on :) |
Beta Was this translation helpful? Give feedback.
-
|
I meant earlier. But appreciate your work, fantastic product. |
Beta Was this translation helpful? Give feedback.
-
|
how is possible to enable it? |
Beta Was this translation helpful? Give feedback.
-
|
@plcdnl It's not possible yet. In the works for Craft 5. |
Beta Was this translation helpful? Give feedback.
-
|
I just want to add an observation that may hopefully raise awareness of the urgency of this subject. Our General liability insurance renewed, and in the questionnaire they specifically asked if the software we provide for our clients supported two factor authentication. I see that this thread was started on August 2017, please get this going soon, and for Craft 4 as well. |
Beta Was this translation helpful? Give feedback.
-
|
It in the However: if it is so important for you, you could implement it on your own. |
Beta Was this translation helpful? Give feedback.
-
|
Small correction, it's the "in progress" list. |
Beta Was this translation helpful? Give feedback.
-
|
Oh sorry, stupid me. Thank you for the correction - not sure what was wrong with me 🤣 |
Beta Was this translation helpful? Give feedback.
-
|
Craft 5 is out now with built-in MFA support 🚀 |
Beta Was this translation helpful? Give feedback.
Craft 5 is out now with built-in MFA support 🚀