Drupal Offline 2FA Setup Guide

Overview

The miniOrange Offline 2FA module enables MFA for Drupal users in environments where Internet connectivity to external authentication services is unavailable. Depending on the configured authentication method, users can authenticate using locally generated methods such as TOTP Authenticator and Recovery Codes. Email and SMS OTP require connectivity to the configured email or SMS gateway. This guide walks you through the configuration of Offline 2FA, including enabling the module and setting up the required authentication options.

Schedule a Meeting

Manual Installation Steps

• Contact the miniOrange team to get the Offline 2FA module package.
• Extract the downloaded module package and upload the offline_2fa module directory to your Drupal site's directory.
• Navigate to Extend in your Drupal admin console and search for miniOrange Offline 2FA.
• Enable the module by checking the checkbox and clicking on the Install button.
• You can configure the module at:
  

  {BaseURL}/admin/config/people/miniorange-offline-2fa

Configuration Steps

Activate the license

• After installing the module, click on Configuration from the Admin toolbar.
• Click the miniOrange Offline 2FA under the People section.

• After that, you will be redirected to the Account Settings tab of the module. On this tab, click the Generate Device ID link.

• On the Generate Device ID pop-up, click the Generate button to generate your Device ID.
• Download the generated Device ID by clicking the Download Device ID button.

• Now, send the downloaded Device ID JSON file to drupalsupport@xecurify.com. You will receive a license file.
• Under License File, click the Choose File button, upload the license file provided by the miniOrange team or paste the content of the license file and click Activate License to activate your Offline 2FA license.

• Once you upload and activate the license file, you will receive a success message and license details.

Configure the 2FA methods

• After activating the license, navigate to the 2FA Methods Configuration tab.
• Select the required Offline 2FA methods and configure their settings. The following Offline 2FA methods are available:
• OTP over Email
• OTP over SMS
• TOTP Authenticator
• Recovery Codes
• You can configure one or more Offline 2FA methods based on your authentication requirements. Configure a single method or enable multiple methods to provide users with different authentication options.


OTP over Email

• Let’s start with the OTP over Email method.
• Turn on the OTP over Email toggle to enable email-based OTP authentication.
• Ensure that the SMTP Authentication Support module is installed and configured to send emails. You can find the module link in the configuration section.



• If you have already configured the SMTP Authentication Support module, the Email OTP Configuration section will display a confirmation message indicating that SMTP is ready to send emails.
• Click Save Configuration to save the settings.




Verify OTP over Email

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Log in with the Drupal credentials.
• On the Select authentication method page, select Email OTP from the Select 2FA Method dropdown.
• Click Send OTP to Email. You will receive an OTP at the registered email address.
• Enter the OTP in the Verification Code field and click the Submit button.



• After the OTP is successfully verified, you will be logged in to the Drupal site, and OTP Over Email will be configured as your 2FA method.

OTP Over SMS

• Turn on the OTP over SMS toggle to enable SMS-based OTP authentication.



• Under the SMS OTP Configuration section, select the SMS Gateway from the dropdown.



• Now, enter the details of your SMS Gateway and click the Test SMS Configuration button to test the configuration.
• After a successful test configuration, click the Save Configuration button.
• OTP over SMS method is successfully configured.




Verify OTP over SMS

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Log in with the Drupal credentials.
• On the Select authentication method page, select SMS OTP from the Select 2FA Method dropdown.
• Enter your phone number with the country code in the Phone Number text field.
• Click Send Verification Code. You will receive an OTP on the given mobile number.
• Enter the OTP in the Verification Code field and click the Submit button.



• After the OTP is successfully verified, you will be logged in to the Drupal site, and OTP Over SMS will be configured as your 2FA method.




TOTP Authenticator

• Turn on the TOTP Authenticator toggle to enable time-based one-time password authentication.
• Enter an Issuer name, which will be displayed in the user's authenticator app. For example: MO-Offline.
• Click Save Configuration to save the TOTP settings.
• TOTP Authenticator method is successfully configured.




Verify TOTP Authenticator

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Log in with the Drupal credentials.
• On the Select authentication method page, select Authenticator App from the Select 2FA Method dropdown.
• Open the configured authenticator app and scan the displayed QR code using your authenticator app, or enter the displayed Secret Key manually in your authenticator app.
• Enter the generated OTP in the Verification Code field and click the Submit button.



• After the OTP is successfully verified, you will be logged in to the Drupal site, and TOTP Authenticator will be configured as your 2FA method.




Recovery Codes

• Turn on the Recovery Codes toggle to allow users to use backup codes when other 2FA methods are unavailable.
• Click Save Configuration to save the settings.
• Recovery Codes method is successfully configured.




Verify Recovery Codes

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Log in with the Drupal credentials.
• On the Select authentication method page, select Recovery Codes from the Select 2FA Method dropdown.
• Your recovery codes will be displayed on the screen. Each recovery code can be used only once to regain access to your account.
• Click Download Recovery Codes to save the recovery codes securely.
• Select the I have safely saved my recovery codes checkbox.
• Click the Submit button to complete the setup.



• After successful setup, you can use any unused recovery code to authenticate if you cannot access your configured 2FA method.

Need Assistance?

24/7 Support

The Drupal developers at miniOrange offer quick and active support for your queries. We can assist you from choosing the best solution for your use case to deploying and maintaining the solution.

Contact us

Case Studies

miniOrange has successfully catered to the use cases of 400+ trusted customers with its highly flexible/customizable Drupal solutions.

Read more

Other Solutions

Feel free to explore other Drupal solutions that we offer the popular solutions used by our trusted customers include 2FA, User Provisioning, Website Security.

Know More