Drupal Offline 2FA Advanced Settings

Overview

The Drupal Offline 2FA module provides advanced settings to customize and control the 2FA authentication experience. Configure options such as Grace Period, Flood Control, Backdoor Login, User Permissions, and Remember Device based on your security requirements.These settings help administrators manage authentication attempts, user access, and trusted devices.

Manual Installation Steps

• Contact the miniOrange team to get the Offline 2FA module package.
• Extract the downloaded module package and upload the offline_2fa module directory to your Drupal site's directory.
• Navigate to Extend in your Drupal admin console and search for miniOrange Offline 2FA.
• Enable the module by checking the checkbox and clicking on the Install button.
• You can configure the module at:
  

  {BaseURL}/admin/config/people/miniorange-offline-2fa

Prerequisite

• Ensure that the Offline 2FA module is installed, licensed, and activated, and that at least one Offline 2FA method is configured. You can configure a single method or multiple methods based on your requirements.

Configuration Steps

Grace Period for 2FA Setup

• After configuring one or more Offline 2FA methods, navigate to the Settings tab.
• Under Grace Period for 2FA Setup, locate the Skip Attempts Before Configuration dropdown.
• Select the number of login attempts users can skip before they are required to configure 2FA.
• Click Save Settings to apply the configuration.

Flood Control

• After configuring the required Offline 2FA method(s), navigate to the Settings tab and select Flood Control.
• Under Maximum Failed Attempts, select the maximum number of failed 2FA validation attempts allowed before the user is temporarily blocked.
• Under Blocking Duration, select how long the user should remain blocked after exceeding the maximum failed attempts.
• Click Clear All User Attempt Data to clear the recorded failed 2FA attempt data for all users.
• Click Save Settings to apply the configuration.

Backdoor Login

• After configuring the required Offline 2FA method(s), navigate to the Settings tab and select Backdoor Login.
• Enable the Enable Backdoor Login toggle.
• A unique Backdoor Login URL will be generated automatically.
• Click Copy URL to copy the generated URL and store it securely for emergency use.
• Click Save Settings to apply the configuration.

User Permissions

• After configuring the required Offline 2FA methods, navigate to the Settings tab and select User Permissions.
• By default, Allow Users to Reconfigure 2FA is enabled, allowing users to change their configured 2FA methods and settings.
• Disable this option if you do not want users to modify their 2FA configurations.
• Click Save Settings to apply the configuration.

Remember Device

• After configuring the required Offline 2FA method(s), navigate to the Settings tab and select Remember Device.
• By default, Enable Remember Device is enabled.
• Under Remember Duration, select how long a trusted device can be remembered before the user is required to complete 2FA again.
• Under Maximum Remembered Devices, select the maximum number of devices a user can mark as trusted. Older devices are automatically removed when the limit is exceeded.
• Click Save Settings to apply the configuration.

Need Assistance?