Two Factor Authentication for DNN using OTP over SMS with Azure Communication Services

Pre-requisites : Download And Installation

• Download the package for DotNetNuke Two Factor Authentication Provider (2FA).
• Upload the installation package dnn-two-factor-authentication-provider_xxx_install by going in Settings > Extension > Install Extension.
• Now under the Installed extensions tab select Authentication Systems. Here you can see the miniOrange DNN 2FA Authentication Provider.

• You have finished with the installation of the 2FA Authentication Provider on your DNN site.

Activate License

• Click on the pencil icon, as mentioned in the image below, to configure the DNN 2FA Authentication Provider.

• Navigate to the Site Settings tab to configure DNN 2FA.

• Log in to the DNN 2FA plugin to access the admin dashboard using your miniOrange account under which the license is purchased.
• Log in to https://portal.miniorange.com/ using your registered account credentials. After logging in, you can find your license key on the Dashboard.
• Enter the license key in the License Key field and click on the Activate License button.

Azure Communication Services as Custom SMS Gateway

• Navigate to Custom SMS Gateway under the Advanced Settings tab and click on the Configure button next to Azure Communication Services.
• Azure Communication Services is used as the SMS delivery gateway to send OTP messages, while OTP generation and verification are handled by the DNN 2FA plugin.

• After clicking on Configure, provide the following details to set up Azure Communication Services: enter the Connection String and the Azure Phone Number (SMS sender number) associated with your Azure Communication Services resource.

• Once you have entered the required details, click on the Save button to save the Azure Communication Services configuration.

• After saving, Azure Communication Services will show as Configured. Enable the toggle button next to it to activate Azure Communication Services as your custom SMS gateway for OTP delivery.

• Once Azure Communication Services is configured and enabled, you can proceed to set up the OTP over SMS method in the next section.

OTP over SMS Method

• Click on OTP Methods under the Configuration tab, select the SMS option, and click on the Configure button for OTP over SMS. The OTP SMS messages will be delivered using the configured Azure Communication Services gateway.

• Select user’s phone number profile attribute and click on Save.

• Enter the phone number and click on the Get OTP button.

• After clicking on the Get OTP button, the user will receive a One Time Passcode on the entered mobile number via Azure Communication Services.

• Enter the received OTP and click on the Verify OTP button. After verifying the OTP, the method will be configured and can be enabled for the end user.

• To enable the method for the end user, click on the OTP over SMS toggle button.

Enable 2FA for End Users and Admins

• Make sure to enable the Enable 2FA for End Users toggle button so that two-factor authentication is enforced for end users.

• If you want to enable 2FA for administrators, turn on the Enable 2FA for Admins toggle.

• To enable 2FA for AD Authentication, click on DNN AD Login under the Advanced Settings tab and select AD Login.