2FA & Ofbiz

[james-2]

CONTENTS DELETED

The author has deleted this message.

[Jacques Le Roux]

There is no 2FA OOTB. I know some have implemented it.

Somehow related:

     >Maybe a text message with a code they must enter

There is a captcha (see captcha.properties) but it's still not 2FA

There are also 3rd party OAuth2 accessible through the passport component, see
https://svn.apache.org/repos/asf/ofbiz/ofbiz-plugins/trunk/passport/README.md, it's still not 2FA

I have implemented SSO ( Single Sign-On) using Shibboleth for a client, but it's again another thing

HTH

Jacques

Le 08/08/2019 à 21:16, [hidden email] a écrit :
> Has anyone had any success adding 2 form authentication to Ofbiz?  Maybe
> a text message with a code they must enter?  Any opensource 2FA
> solutions out there?
>
> Thanks,
>
> James
>

[Yashwant Dhakad-2]

Hi James,
You can achieve this by customization in the login and registration
processes and add security questions and answers during login. These Q&A
will be maintained by the survey.

Thanks & Regards
--
Yashwant Dhakad


On Sat, Aug 10, 2019 at 5:45 PM Jacques Le Roux <
[hidden email]> wrote:

> There is no 2FA OOTB. I know some have implemented it.
>
> Somehow related:
>
>      >Maybe a text message with a code they must enter
>
> There is a captcha (see captcha.properties) but it's still not 2FA
>
> There are also 3rd party OAuth2 accessible through the passport component,
> see
>
> https://svn.apache.org/repos/asf/ofbiz/ofbiz-plugins/trunk/passport/README.md,
> it's still not 2FA
>
> I have implemented SSO ( Single Sign-On) using Shibboleth for a client,
> but it's again another thing
>
> HTH
>
> Jacques
>
> Le 08/08/2019 à 21:16, [hidden email] a écrit :
> > Has anyone had any success adding 2 form authentication to Ofbiz?  Maybe
> > a text message with a code they must enter?  Any opensource 2FA
> > solutions out there?
> >
> > Thanks,
> >
> > James
> >
>

[Pierre Smits-3]

Given the reactions in this thread it seems that there is little need for
this kind of functionality by the OFBiz adopters.
Maybe current functionalities (including those in the passport component)
for logging in and out of OFBiz suffices for the majority of the OFBiz
adopters, or maybe those and future adopters are waiting to see someone
contribute a plugin that works.

Best regards,

Pierre Smits

*Apache Trafodion <https://trafodion.apache.org>, Vice President*
*Apache Directory <https://directory.apache.org>, PMC Member*
Apache Incubator <https://incubator.apache.org>, committer
*Apache OFBiz <https://ofbiz.apache.org>, contributor (without privileges)
since 2008*
Apache Steve <https://steve.apache.org>, committer


On Mon, Aug 12, 2019 at 6:58 AM Yashwant Dhakad <
[hidden email]> wrote:

> Hi James,
> You can achieve this by customization in the login and registration
> processes and add security questions and answers during login. These Q&A
> will be maintained by the survey.
>
> Thanks & Regards
> --
> Yashwant Dhakad
>
>
> On Sat, Aug 10, 2019 at 5:45 PM Jacques Le Roux <
> [hidden email]> wrote:
>
> > There is no 2FA OOTB. I know some have implemented it.
> >
> > Somehow related:
> >
> >      >Maybe a text message with a code they must enter
> >
> > There is a captcha (see captcha.properties) but it's still not 2FA
> >
> > There are also 3rd party OAuth2 accessible through the passport
> component,
> > see
> >
> >
> https://svn.apache.org/repos/asf/ofbiz/ofbiz-plugins/trunk/passport/README.md
> ,
> > it's still not 2FA
> >
> > I have implemented SSO ( Single Sign-On) using Shibboleth for a client,
> > but it's again another thing
> >
> > HTH
> >
> > Jacques
> >
> > Le 08/08/2019 à 21:16, [hidden email] a écrit :
> > > Has anyone had any success adding 2 form authentication to Ofbiz?
> Maybe
> > > a text message with a code they must enter?  Any opensource 2FA
> > > solutions out there?
> > >
> > > Thanks,
> > >
> > > James
> > >
> >
>