Setup Soft Token as 2FA/MFA for Drupal

Overview

Two Factor Authentication - TFA adds a layer of security on top of basic Drupal authentication. This increase site's security from unwanted hacks and unauthorized login attempts. By following this document you can configure Soft Token as a Two Factor Authentication - MFA method for Drupal account. The Drupal Two Factor Authentication - 2FA / Passwordless Login is available for Drupal 7, Drupal 8, Drupal 9 and Drupal 10, and Drupal 11.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  Composer require 'drupal/miniorange_2fa'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange Second Factor Authentication using the search box.
• Enable the module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

• Download the latest version of Soft Token on iOS/Android device.
• iPhone, iPod Touch, or iPad: Download
• Android devices: Download

• Install the module:

  drush en miniorange_2fa

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the miniOrange Second Factor Authentication module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

Configuration Steps

Configure Soft Token as a 2FA method:

• Once the module is installed navigate to the Configuration section in the admin console of Drupal site and click on miniOrange Second Factor under people section. (/admin/config/people/miniorange_2fa/setup_twofactor)
• Register/Login with your miniOrange account.
• Navigate to the 2FA for Primary Admin tab and scroll down to the TOTP based 2FA methods section.
• Click on the Configure button next to miniOrange Authenticator.

• Open the miniOrange Authenticator app and scan the QR code displayed.
• After scanning the QR code with the miniOrange Authenticator, the form is automatically submitted.

You have successfully configured miniOrange Authenticator as a 2FA method.

Verify 2FA:

• Open a new browser/private window and navigate to the login page of the Drupal site.

• Try Login with the Drupal credentials.

• You will be asked to authenticate using the Soft Token passcode.

• Enter the code generated in your miniOrange app and click on the Verify button.

• If the authentication is successful you will be logged in to the Drupal site.