Configure: OTP Using external application
One Time Password
Configure: OTP Using external application
One Time Password
Configure: OTP using external application
In this article is described instructions for configuring Secure Access component to be able to authenticate Customers end-users to Matrix42 Pro/IGA solutions (like for example IGA, ITSM etc.), build on top pf Efecte Service Management Platform by using 2FA (Two-factor authentication).
Keycloak allows 2FA to be configured, by using either 'Google Authenticator', ‘Microsoft Authenticator’ or 'FreeOTP' application - that users will have to install in their phones.
Step-by-Step Instructions
- Login with ESA Admin (main.admin) to URL domain.com/auth/admin
- Open Authentication settings from the left side panel. And then in 'Required Actions' tab, in action: 'Configure OTP', tick box for 'Set as default Action'.
- In Authentication select three dots and 'Bind flow' and determine what is the flow linked to the 'Browser Flow' (in the example below, the flow linked to 'Browser Flow' is 'Efecte Login')
-
In 'Authentication', select 'Flows' tab, then select the flow linked to the 'Browser Flow' (in our example, it was 'Efecte Login'), then click on 'Add step' button, and select 'OTP Form'
-
Mark 'OTP Form' as 'Required'. After that 2FA is configured.
Login
Then, next time that a user logs in, first, the user will have to write his/her credentials and immediately afterwards, he/she will have to configure OTP (with instructions presented on the screen) and write the generated One-time-password (OTP).
For all success log-ins, the user will have to provide credentials and then the one-time-password provided by the authenticator application that should already be installed in his/her phone.
In case the user lost/changed his/her phone, so he doesn't have the one-time-password application installed in his phone anymore, we must delete the user's entry in ESA admin side. This way, the user will be able to reconfigure his/her one-time-password application next time that he/she will login to Matrix42 Pro/IGA.
Table of Contents