Two-factor authentication (2FA) is an additional security step when logging in: in addition to the password, a time-based one-time code must be entered.
Technology
- The module uses TOTP (Time-based One-Time Password) according to RFC 6238
- Supported apps: Google Authenticator, Authy and other compatible TOTP apps
Setup
- The user opens the 2FA settings in their profile
- A QR code is displayed, which is scanned with the authenticator app
- Alternatively, the code can be entered into the app manually
- At the next login, the 6-digit TOTP code is requested in addition to the password
Configuration by the operator
- 2FA can be configured as mandatory for certain user roles (e.g. only for administrators)
- Optional or enforced activation per user group