Configure Kentico 2FA using Google Authenticator

Overview

Kentico Two-Factor Authentication (2FA) adds an extra layer of security to your Kentico application login by enabling Google Authenticator. After users enter the correct username and password, they are required to enter a time-sensitive passcode generated by the Google Authenticator app. Google Authenticator is a reliable second-factor method that helps protect user accounts against phishing, brute-force attacks, and unauthorized access. The plugin also supports methods such as Microsoft Authenticator, OTP over SMS, and OTP over Email.

Pre-requisites : Download And Installation

• Download the Kentico Two-Factor Authentication (2FA) plugin.
• Add the following module in your web.config file under the <modules> section.

• After adding the module, open your browser and browse the plugin dashboard with the URL below:

• Select the required connection string from the dropdown and click on the Save and Test Connection buttons to configure the database connection for the miniOrange Kentico MFA plugin.

• After saving and testing the connection, click the Continue button to proceed.

Configuration Steps

Step-by-step guide for implementing Two-Factor Authentication (2FA) in Kentico using Google Authenticator.

1. Access the Kentico 2FA Plugin Dashboard

• After successful database configuration, the registration page or login page will appear as shown below.

• Register with your account by clicking the Register button to configure the Kentico MFA plugin.
• After successful registration, you will receive a trial license key on your registered email address.
• To activate the plugin, you can either:
  
  
  • Enter the license key received via email in the provided input field.

  OR

  • Go to the Upload License File tab and upload the license file that you downloaded using the Download License Key button by using the Choose File option.

• Then, click the Activate License button.

• After successful license activation, the plugin dashboard will open as shown below.

2. Configure Google Authenticator

• On the plugin dashboard, navigate to the Authenticator apps tab and click the Configure button below the Google Authenticator method.

• To register your device, scan the QR code using the Google Authenticator app or use the secret code.

• After scanning the QR code, a six-digit token will be generated in the Google Authenticator app. Enter the passcode and click the Verify button to complete the setup.

• Once the Google Authenticator method is configured, enable it for the end user by clicking the toggle button.

• Enable the Enable 2FA for End-Users toggle button.

• To enable 2FA for administrators, turn on the Enable 2FA for Administrators toggle.

3. Test Google Authenticator on Kentico Login Page

• Log in to your Kentico application.

• After login, end users see the Setup 2FA methods list.

• Click Setup beside Google Authenticator.

• Scan the QR code using the Google Authenticator app or enter the secret key manually. Then, enter the generated passcode.

• After entering the passcode, click the Verify button to complete Google Authenticator registration.

• On subsequent logins, enter the passcode generated by the Google Authenticator app and click the Verify button.

• The user will be logged in to their Kentico application.

Related Articles

• Two Factor Authentication (2FA) for Umbraco
• Two Factor Authentication (2FA) for ASP.NET
• Two Factor Authentication (2FA) for DNN