|
1 |
| -MSP TwoFactorAuth |
| 1 | +# Magento Two Factor Authentication |
2 | 2 |
|
3 |
| -Two Factor Authentication module for maximum **backend access protection** in Magento 2. |
4 |
| - |
5 |
| -> Member of **MSP Security Suite** |
6 |
| -> |
7 |
| -> See: https://github.com/magespecialist/m2-MSP_Security_Suite |
8 |
| -
|
9 |
| -Did you lock yourself out from Magento backend? <a href="https://github.com/magespecialist/m2-Magento_TwoFactorAuth#emergency-commandline-disable">click here.</a> |
10 |
| - |
11 |
| -## Main features: |
12 |
| - |
13 |
| -* Providers: |
14 |
| - * Google authenticator |
15 |
| - * QR code enroll |
16 |
| - * Authy |
17 |
| - * SMS |
18 |
| - * Call |
19 |
| - * Token |
20 |
| - * One touch |
21 |
| - * U2F keys (Yubico and others) |
22 |
| - * Duo Security |
23 |
| - * SMS |
24 |
| - * Push notification |
25 |
| -* Central security suite events logging |
26 |
| -* Per user configuration |
27 |
| -* Forced global 2FA configuration |
28 |
| - |
29 |
| -## Installing on Magento2: |
30 |
| - |
31 |
| -**1. Install using composer** |
32 |
| - |
33 |
| -From command line: |
34 |
| - |
35 |
| -`composer require msp/twofactorauth` |
36 |
| - |
37 |
| -**2. Enable and configure from your Magento backend config** |
38 |
| - |
39 |
| -Enable from **Store > Config > SecuritySuite > Two Factor Authentication**. |
40 |
| - |
41 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/config.png" /> |
42 |
| - |
43 |
| -**3. Enable two factor authentication for your user** |
44 |
| - |
45 |
| -You can select among a set of different 2FA providers. **Multiple concurrent providers** are supported. |
46 |
| - |
47 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/user_tfa.png" /> |
48 |
| - |
49 |
| -**4. Subscribe / Configure your 2FA provider(s):** |
50 |
| - |
51 |
| -**4.1 Google Authenticator example** |
52 |
| - |
53 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/google_qr.png" /> |
54 |
| - |
55 |
| -**4.2. Duo Security example** |
56 |
| - |
57 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/duo_auth.png" /> |
58 |
| - |
59 |
| -**4.3. U2F key (Yubico and others) example** |
60 |
| - |
61 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/u2f_auth.png" /> |
62 |
| - |
63 |
| -**4.4. Authy example** |
64 |
| - |
65 |
| -<img src="https://raw.githubusercontent.com/magespecialist/m2-Magento_TwoFactorAuth/master/screenshots/authy_auth.png" /> |
66 |
| - |
67 |
| -## Emergency commandline disable: |
68 |
| - |
69 |
| -If you messed up with two factor authentication you can disable it from command-line: |
70 |
| - |
71 |
| -`php bin/magento msp:security:tfa:disable` |
72 |
| - |
73 |
| -This will disable two factor auth globally. |
74 |
| - |
75 |
| -## Emergency commandline reset: |
76 |
| - |
77 |
| -If you need to manually reset one single user configuration (so you can restart configuration / subscription), type: |
78 |
| - |
79 |
| -`php bin/magento msp:security:tfa:reset <username> <provider>` |
80 |
| - |
81 |
| -e.g.: |
82 |
| - |
83 |
| -`php bin/magento msp:security:tfa:reset admin google` |
84 |
| - |
85 |
| -`php bin/magento msp:security:tfa:reset admin u2fkey` |
86 |
| - |
87 |
| -`php bin/magento msp:security:tfa:reset admin authy` |
88 |
| - |
89 |
| -## Emergency of emergency and your house is on fire, your dog is lost and your wife doesn't love you anymore: |
90 |
| - |
91 |
| -**DO NOT ATTEMPT TO MODIFY ANY DB INFORMATION UNLESS YOU UNDERSTAND WHAT YOU ARE DOING** |
92 |
| - |
93 |
| -Table `core_config_data`: |
94 |
| -* `msp/twofactorauth/enabled`: Set to zero to disable 2fa globally |
95 |
| -* `msp/twofactorauth/force_providers`: Delete this entry to remove forced providers option |
96 |
| - |
97 |
| -Table `msp_tfa_user_config`: |
98 |
| -* Delete one user row to reset user's 2FA preference and configuration |
| 3 | +The Magento Admin provides all access to your store, orders, and customer data. To prevent unauthorized access to your data, all users who attempt to sign in to the Admin of your Magento installation must complete a second step to verify their identity. |
99 | 4 |
|
| 5 | +For more information please view the Magento documentation for [a general guide on 2fa](https://docs.magento.com/user-guide/stores/security-two-factor-authentication.html) as well as a [a more technical guide](https://devdocs.magento.com/guides/v2.4/security/two-factor-authentication.html). |
0 commit comments