Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add local 2FA/MFA option to uzERP #232

Open
steveblamey opened this issue Mar 8, 2021 · 2 comments
Open

Add local 2FA/MFA option to uzERP #232

steveblamey opened this issue Mar 8, 2021 · 2 comments
Labels
enhancement Low Priority

Comments

@steveblamey
Copy link
Member

steveblamey commented Mar 8, 2021 •
edited
Loading

It would be desirable to add 2FA/MFA to uzERP. Possibly use TOTP from https://github.com/Spomky-Labs/otphp. There is also a Webauthn library https://webauthn-doc.spomky-labs.com/, to support hardware tokens and fingerprint devices, etc.
@steveblamey
Copy link
Member Author

We should also review password and account lockout policies, etc. with reference to https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf. Particularly note section 5 in conjunction with Appendix A.

@steveblamey
Copy link
Member Author

6858935 merges support for Twilio Verify.

Now the infrastructure is there we should be able to add a local TOTP option with https://github.com/Spomky-Labs/otphp

@steveblamey steveblamey changed the title Add 2FA/MFA option to uzERP Add local 2FA/MFA option to uzERP Sep 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement Low Priority
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@steveblamey