Setup Soft Token as 2FA/MFA for Drupal

Overview

Two Factor Authentication - TFA adds a layer of security on top of basic Drupal authentication. This increase site's security from unwanted hacks and unauthorized login attempts. By following this document you can configure Soft Token as a Two Factor Authentication - MFA method for Drupal account. The Drupal Two Factor Authentication - 2FA / Passwordless Login is available for Drupal 7, Drupal 8, Drupal 9 and Drupal 10, and Drupal 11.

Download Schedule a Meeting

Installation Steps

Configuration Steps

Configure Soft Token as a 2FA method:

• Once the module is installed navigate to the Configuration section in the admin console of Drupal site and click on miniOrange Second Factor under people section. (/admin/config/people/miniorange_2fa/setup_twofactor)
• Register/Login with your miniOrange account.
• Navigate to the Setup Two Factor tab and scroll down to the TOTP based 2FA methods section.
• Click on the Configure button next to miniOrange Authenticator.

• Open the miniOrange Authenticator app and scan the QR code displayed.
• After scanning the QR code with the miniOrange Authenticator, the form is automatically submitted.

You have successfully configured miniOrange Authenticator as a 2FA method.

Verify 2FA:

• Open a new browser/private window and navigate to the login page of the Drupal site.

• Try Login with the Drupal credentials.

• You will be asked to authenticate using the Soft Token passcode.

• Enter the code generated in your miniOrange app and click on the Verify button.

• If the authentication is successful you will be logged in to the Drupal site.