Setup Security Questions KBA as 2FA/MFA for Drupal

Overview

Two-factor authentication (2FA) plays a key role in securing Drupal accounts against password breaches by adding an additional layer of security. By following this document you can configure Security Questions (KBA)  as a Two Factor Authentication - TFA method for Drupal account. The Drupal Two Factor Authentication - 2FA / Passwordless Login is available for Drupal 7, Drupal 8, Drupal 9 and Drupal 10, and Drupal 11.

Configuration Steps

Configure Security Questions KBA as a 2FA method:

• Once the module is installed navigate to the Configuration section in the admin console of Drupal site and click on miniOrange Second Factor under people section. (/admin/config/people/miniorange_2fa/setup_twofactor)
• Register/Login with your miniOrange account.
• Navigate to the Setup Two Factor tab and scroll down to the Other 2FA methods section.
• Click on the Configure button next to Security Questions (KBA).

• Select the Questions and Answers accordingly and click on the Configure KBA button.

You have successfully configured Security Questions (KBA) - 2FA method.

Verify 2FA:

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Login with the Drupal credentials.
• You will be asked to authenticate your identity using the Security Questions - KBA.
• Answer the questions and click on the Verify button.
• If the authentication is successful you will be logged in to the Drupal site.