Umbraco MFA

[biapar]

Hi, How to add an MFA to local login in U14+?
I want to add an OTP pin sent via email.
Thanks.

[iOvergaard]

Here is a guide on how to do it with a Google login: https://docs.umbraco.com/umbraco-cms/reference/security/two-factor-authentication#two-factor-authentication-for-users

There is also this package that simplifies the setup and supports Google, Microsoft, and Twilio: https://marketplace.umbraco.com/package/umbraco.community.user2fa

If you want to send out an email, you will have to either implement that step yourself rather than rely on the Google Authentication NuGet package (there are hooks you can use in the provider setup), or perhaps you can find another NuGet package that does it for you.

I would also like to redirect you to our Umbraco Forum for any further questions. There are a lot of people over there with a lot of experience.

[biapar]

I read the Umbraco documentation...I'm on it every day for other projects. The problem is not about to add Google or Microsoft Authentication but how to create and add a custom OTP authentication, sent the PIN via email and authenticate the user.

[iOvergaard]

I understand, but the mechanism is the same. You have to follow the interface ITwoFactorProvider, which has a method called public bool ValidateTwoFactorPIN(string secret, string code). Here, you will have to validate the code the user received.

To send out the two-factor code via email, you will have to get the login screen to call a controller that initiates the email for the supplied email address. After that, the login system should take care of the rest.

There may be a NuGet package that does some of this for you.

[nul800sebastiaan]

As noted by Jacob, if you need help with that, the forum is the best place to ask.

However, I've not seen this done by anyone so the most I expect you'll get is some pointers on how to build it.

[biapar]

Thanks. Yes..I need only the info/guide to use API and how or where to insert with my custom code.