Configure Kentico 2FA Using OTP Over SMS

Overview

Kentico Two-Factor Authentication (2FA) adds an extra layer of security to your Kentico application login by enabling OTP verification over SMS. After users enter the correct username and password, they receive a time-sensitive one-time passcode (OTP) on their registered mobile number. OTP over SMS is a reliable second-factor method that helps protect user accounts against phishing, brute-force attacks, and unauthorized access. The plugin also supports methods such as Google Authenticator, Microsoft Authenticator, and OTP over Email.

Pre-requisites : Download And Installation

• Download the Kentico Two-Factor Authentication (2FA) plugin.
• Add the following module in your web.config file under the <modules> section.

• After adding the module, open your browser and browse the plugin dashboard with the URL below:

• Select the required connection string from the dropdown and click on the Save and Test Connection buttons to configure the database connection for the miniOrange Kentico MFA plugin.

• After saving and testing the connection, click the Continue button to proceed.

Configuration Steps

Step-by-step guide for implementing Two-Factor Authentication (2FA) in Kentico using OTP over SMS.

1. Access the Kentico 2FA Plugin Dashboard

• After successful database configuration, the registration page or login page will appear as shown below.

• Register with your account by clicking the Register button to configure the Kentico MFA plugin.
• After successful registration, you will receive a trial license key on your registered email address.
• To activate the plugin, you can either:
  
  
  • Enter the license key received via email in the provided input field.

  OR

  • Go to the Upload License File tab and upload the license file that you downloaded using the Download License Key button by using the Choose File option.

• Then, click the Activate License button.

• After successful license activation, the plugin dashboard will open as shown below.

2. Configure OTP over SMS

• On the plugin dashboard, navigate to the OTP via SMS tab and click the Configure button below the OTP over SMS method.

• Enter the phone number with country code and click the Get OTP button.

• After clicking the Get OTP button, the user will receive a One Time Passcode on the entered mobile number. Enter the received OTP.

• Click the Verify OTP button. After verifying the OTP, the method will be configured and can be enabled for the end user.

• To enable the method for the end user, click on the OTP over SMS toggle button.

• Enable the Enable 2FA for End-Users toggle button.

• To enable 2FA for administrators, turn on the Enable 2FA for Administrators toggle.

3. Test OTP over SMS on Kentico Login Page

• Log in to your Kentico application.

• After login, end users see the Setup 2FA methods list.

• Click Setup beside OTP Over SMS.

• Enter the phone number with country code and click the Get OTP button.

• Enter the OTP sent to your phone number and click Verify OTP.

• On the next login, enter the OTP and click Verify OTP.

• The user will be logged in to their Kentico application.

Related Articles

• Two Factor Authentication (2FA) for Umbraco
• Two Factor Authentication (2FA) for ASP.NET
• Two Factor Authentication (2FA) for DNN