Two-factor authentication via Google or Duo Security

[bruceaalee]

Hey guys,
I’ve been researching and testing SuiteCRM on and off for the past month. I am admittedly a novice when it comes to understanding the logic and custom module creation process. However, I was wondering if anyone has any experience integrating either google authenticator or DuoSecurity for two-factor authentication?

I believe google authenticator is more complex to integrate, but Duo-Security is easier in theory. They have a SDK that is very simple and easy to understand.

Best Regards,
Ali

[Will]

Hi Ali,

Not something we have done. Would be great to know your progress on this.

Thanks,

Will.

[anothermouse]

Under these circumstances IF you are using google to carry out the authentication you can use this:

Let's implement OAuth2 logins with google

This post is designed to take people through this process so that they can implement Google logins for their SuiteCRM instance. I’m basically going to take people through the process that I used in order to get it working on an instance. There are obviously loads of ways of doing this, but I hope that following through this process will allow people to learn a bit about the SuiteCRM architecture and inspire people to get in and play with the code. Plus loads of people seem to want to be able to …

However if you are wanting to use google authenticator in order to work stand alone with suiteCRM, then the 2FA functionality that now exists in SuiteCRM can be used, but you’d need to identify specific 2FA devices that it works with. Could be an interesting project for someone?

[01systems]

2FA now built in? That sounds like a thing!