Configure Kentico 2FA Using OTP Over Email

Overview

Kentico Two-Factor Authentication (2FA) adds an extra layer of security to your Kentico application login by enabling OTP verification over Email. After users enter the correct username and password, they receive a time-sensitive one-time passcode (OTP) on their registered email address. OTP over Email is a reliable second-factor method that helps protect user accounts against phishing, brute-force attacks, and unauthorized access. The plugin also supports methods such as Google Authenticator, Microsoft Authenticator, and OTP over SMS.

Pre-requisites : Download And Installation

• Download the Kentico Two-Factor Authentication (2FA) plugin.
• Add the following module in your web.config file under the <modules> section.

• After adding the module, open your browser and browse the plugin dashboard with the URL below:

• Select the required connection string from the dropdown and click on the Save and Test Connection buttons to configure the database connection for the miniOrange Kentico MFA plugin.

• After saving and testing the connection, click the Continue button to proceed.

Configuration Steps

Step-by-step guide for implementing Two-Factor Authentication (2FA) in Kentico using OTP over Email.

1. Access the Kentico 2FA Plugin Dashboard

• After successful database configuration, the registration page or login page will appear as shown below.

• Register with your account by clicking the Register button to configure the Kentico MFA plugin.
• After successful registration, you will receive a trial license key on your registered email address.
• To activate the plugin, you can either:
  
  
  • Enter the license key received via email in the provided input field.

  OR

  • Go to the Upload License File tab and upload the license file that you downloaded using the Download License Key button by using the Choose File option.

• Then, click the Activate License button.

• After successful license activation, the plugin dashboard will open as shown below.

2. Configure OTP over Email

• On the plugin dashboard, navigate to the OTP via Email tab and click the Configure button below the OTP over Email method.

• Enter the email address and click the Get OTP button.

• After clicking the Get OTP button, the user will receive a One Time Passcode on the entered email address. Enter the received OTP.

• Click the Verify OTP button. After verifying the OTP, the method will be configured and can be enabled for the end user.

• To enable the method for the end user, click on the OTP over Email toggle button.

• Enable the Enable 2FA for End-Users toggle button.

• To enable 2FA for administrators, turn on the Enable 2FA for Administrators toggle.

3. Test OTP over Email on Kentico Login Page

• Log in to your Kentico application.

• After login, end users see the Setup 2FA methods list.

• Click Setup beside OTP Over Email.

• Enter the email address where you want to receive the OTP and click Get OTP.

• Enter the OTP received over email and click Verify OTP.

• On the next login, enter the OTP and click Verify OTP.

• The user will be logged in to their Kentico application.

Related Articles

• Two Factor Authentication (2FA) for Umbraco
• Two Factor Authentication (2FA) for ASP.NET
• Two Factor Authentication (2FA) for DNN