OpenOTP Authentication

Categories

Administration
Security
User Access & Authentication

Component ID

2129989

Component name

OpenOTP Authentication

Component type

module

Maintenance status

Actively maintained

Development status

Under active development

Component security advisory coverage

not-covered

Component created

Component changed

Component body

This Plugin enables strong two factor authentication for admins
and users.

DESCRIPTION:

It displays an overlay on Challenge-Response session, after fill in username and password. The plugin supports global, per role and per user settings configuration.

The plugin will transparently handle any OpenOTP Login Mode including LDAP only, OTP only, LDAP+OTP and also LDAP+U2F.

We also provide convenient authentication workflows with mobile push notification, our free token software application is available on iOS App store and Android Play Store. Download, install and register your token on your account (by scanning a QR code) to get access to Drupal administration Panel using one tap push login

One of the last feature added to plugin is extremely user friendly while remaining very secure. Simply activate contextual authentication in OpenOTP server configuration, and the LoginMode change to LDAP-only for requests coming from trusted devices on trusted IPs. It means that first login on a particular device/browser require two-factor authentication and store your device/IP as temporarily trusted. Next login will use contextual authentication and decrease the security level to LDAP only.

Permissions (per role) to:

  • Perform administration tasks for OpenOTP
  • Allow users to enable two-factor on their profile settings page
  • Enable two-factor authentication for user role

By default in Drupal User #1 has all privileges, a setting allow to
enable or not two-factor for super admin user

OPENOTP SERVER:

OpenOTP is the RCDevs user authentication solution. OpenOTP is a server
application which provides multiple (highly configurable) authentication
schemes for your LDAP users, based on one-time passwords (OTP) technologies
and including:

  • One Tap Mobile Push Notification
  • OATH HOTP/TOTP/OCRA Software/Hardware Tokens
  • Google Authenticator
  • Mobile-OTP (mOTP) Software Tokens
  • SMS One-Time Passwords
  • Mail / Secure Mail One-Time Passwords
  • Yubikey

OpenOTP provides both SOAP/XML and RADIUS client APIs.

See OpenOTP

Website RCDevs

Component url

https://www.drupal.org/sandbox/rcdevs/2129989