Two Factor Authentication - 2FA Backend Users

Two Factor Authentication (2FA) / Multi Factor Authentication (MFA) for Magento Store Administrators (Backend Users)

Two-Factor Authentication (2FA) extension by miniOrange enables second-factor authentication for your admins (backend users) and is highly secure & easy to set-up extension. To access the account, one must go through an additional layer of authentication in addition to the standard login and password verification method.

Magento Two Factor Authentication / Google Authenticator extension provides two-factor authentication for admins during login via a range of methods (15+ authentication methods), including text message, Google Authenticator, hardware tokens, and many more.

Click here to know more about the Magento 2FA extension.

This extension supports OTP Over SMS, OTP Over Email, OTP Over Email and SMS, OTP Over WhatsApp, OTP Over Telegram, Google Authenticator, Microsoft Authenticator, Duo Authenticator,and many more authentication methods.

Features:- 

• 15+ Authentication Methods - Includes OTP over Email, OTP over SMS and OTP over SMS and Email, Google Authenticator, Microsoft Authenticator, Duo Authenticator, etc. 
• Supports Custom SMS / Email Gateway - Support custom email and custom SMS Gateway along with GET and POST method. Easily configurable with custom email and sms gateways like twilio, MSG91, Sendgrid and practically any other email and SMS gateway. 
• Backend Role based 2FA - Assign different 2FA methods for different admin roles 
• Allow specific 2FA methods to configure in inline registration - Allow Admins to choose from different 2FA methods or enforce 2FA from the default (selected) method during registration. 
• Reconfigure/ Change 2FA method for Admin 
• Customize Email Templates - Customize the Email sent to your Admins  
• Customize SMS Templates - Customize the SMS sent to your Admins  
• User Management  - Admins can manage and reset configured 2FA methods for all the roles of backend and frontend store users. 
• Backdoor URL as Backup method - Allows admin to gain access to Magento backdoor by the URL provided incase admin gets locked out, if the phone is lost or stolen, problem in receiving the OTP etc.

Supported 2FA / MFA authentication methods

1. Phone/Email based authentication
   • OTP (One-time passcode) over SMS
   • OTP over Email
   • OTP over SMS and Email (same OTP will be send over SMS and Email)
2. TOTP (time based one time password) Apps
   • Google Authenticator
   • Microsoft Authenticator
   • Duo Authenticator
   • Okta Verify Authenticator (Addon) 
   • Authy 2-Factor Authenticator (Addon) 
   • LastPass Authenticator (Addon) 
   • miniOrange Authenticator (Addon) 
   • Contact us if you need any other app.
3. Other ( Available with Addon)
   • Security Questions (KBA)
   • USB based Hardware token (yubikey) 
   • Mobile Authentication (QR Code authentication) 
   • Push Notification (User will receive Accept and Deny transaction popup on phone)
   • Soft Token (similar to Google authenticator)

Note :- We do not make any API calls on our servers if you are using custom sms and email gateway to send OTP to your customers. If you would be using miniOrange gateway to send OTP then we use the required parameters to send OTP (Only Mobile number incase of OTP over SMS and Email address incase of SMS over Email.). This information is neither collected nor stored anywhere with us.

Custom feature requirements 

If you want any custom changes or features in this extension, let us know your requirement on magentosupport@xecurify.com and we will add that feature in the extension for you.

Dependencies

NONE

24/7 Support

In case you face any issues or if you have any questions, please feel free to reach out to us on our 24*7 active support at magentosupport@xecurify.com or Contact us.