[xwiki-users] Two Factor Authentication
Hi, I'm quite happy with LDAP auth, but a possible use case has arisen where two factor auth (token or similar) would be required. Does anyone have any experiences with any two factor authentication methods for xwiki. Cheers
Did you say OAuth? The socialauth library has been employed in https://github.com/xwiki-contrib/xwiki-social-login . Maybe this helps? Or maybe you want the converse? paul On 13 févr. 2013, at 18:55, shouldbe q931 wrote:
Hi,
I'm quite happy with LDAP auth, but a possible use case has arisen where two factor auth (token or similar) would be required.
Does anyone have any experiences with any two factor authentication methods for xwiki.
Cheers _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On Wed, Feb 13, 2013 at 7:53 PM, Paul Libbrecht <[email protected]> wrote:
Did you say OAuth? The socialauth library has been employed in https://github.com/xwiki-contrib/xwiki-social-login . Maybe this helps? Or maybe you want the converse?
paul
I might be missing something, but I thought that OAuth was allowing a user to use a 3rd party for authentication and initial authorization, such as using a google account to create an account on stackoverflow, but did not have any connection to two factor authentication where you are restricting access to users that have a username, password and "token". I mentioned tokens, as for this use case client certificates would not be a workable solution, otherwise I could just put haproxy in front of xwiki and do client certificate checks there.... Cheers
On 13 févr. 2013, at 18:55, shouldbe q931 wrote:
Hi,
I'm quite happy with LDAP auth, but a possible use case has arisen where two factor auth (token or similar) would be required.
Does anyone have any experiences with any two factor authentication methods for xwiki.
Cheers _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
The two stage tokens is the underlying way it works in OAuth, I'm not saying it's the way you intend it. Please explain or give references. Paul On 13 févr. 2013, at 22:36, shouldbe q931 wrote:
On Wed, Feb 13, 2013 at 7:53 PM, Paul Libbrecht <[email protected]> wrote:
Did you say OAuth? The socialauth library has been employed in https://github.com/xwiki-contrib/xwiki-social-login . Maybe this helps? Or maybe you want the converse?
paul
I might be missing something, but I thought that OAuth was allowing a user to use a 3rd party for authentication and initial authorization, such as using a google account to create an account on stackoverflow, but did not have any connection to two factor authentication where you are restricting access to users that have a username, password and "token".
I mentioned tokens, as for this use case client certificates would not be a workable solution, otherwise I could just put haproxy in front of xwiki and do client certificate checks there....
I'm quite happy with LDAP auth, but a possible use case has arisen where two factor auth (token or similar) would be required.
Does anyone have any experiences with any two factor authentication methods for xwiki.
On Thu, Feb 14, 2013 at 7:11 AM, Paul Libbrecht <[email protected]> wrote:
The two stage tokens is the underlying way it works in OAuth, I'm not saying it's the way you intend it. Please explain or give references.
Paul
I think we are at cross purposes, I mean a token as a hardware device such as an RSA fob, or softphone application such as Google Authenticator, a "device" that provides the "something your have". To provide two examples For me to login to gmail, I enter my username and password, and I am then prompted to enter the six digit authentication code from Google Authenticator running on my phone. For me to login to a specific VPN, I enter a username, password and code displayed on an RSA fob. Cheers
participants (2)
-
Paul Libbrecht -
shouldbe q931