Step by Step Guide for Setup Magento Two-factor Authentication (2FA) (OTP over SMS)

Setup OTP over SMS 2FA method with Magento extension. This guide will help you to configure OTP over SMS as Two Factor Authentication ( 2FA ) method for your Magento site. The Magento 2FA extension will add a second layer of authentication to your Magento account to increase the security of your site from unwanted hacks and unauthorized login attempts.

Pre-requisites : Download And Installation

Installation using Composer:

• Purchase the miniOrange Two Factor Authentication extension from magento marketplace.
• On the marketplace dashboard select My profile > My purchases and note the module_name & version.
• Then again go to My Profile > Access Keys in the marketplace dashboard and note the access keys. (If you do not have an access key, simply click the "Create A New Access Key" button to generate one).
• Use the below command in command prompt to add the extension to your project.

  "composer require miniorange_inc/miniorange-2fa"

• Use Public key as username and private key as password for verification which you will get from access keys.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Manual Installation:

• Download miniOrange Two Factor Authentication Free plugin zip from here.
• Unzip all contents of the zip inside the MiniOrange/Two_FA directory.

             {Root Directory of Magento} app code MiniOrange Two_FA
             

• Run the following commands on command prompt to enable the plugin

1. php bin/magento setup:di:compile

2. php bin/magento setup:upgrade

  Setup OTP over SMS 2FA method

Custom Gateway

A. Custom gateway SMTP configuration

• You can setup Your own Custom Gateway in the Custom Gateway Tab.

1. In the first section add your SMTP details.

2. In the second section add your Email details.

3. In the third section test your Email configuration.

Note: Please refer below screenshot

B. Custom gateway SMS configuration

• We do support following Gateway method:

1. Twilio

2. Get Method

3. Post Method

Note: Please refer below screenshot

Your choice of Second factor

miniOrange 2-factor extension is extendable to use any of the following 2FA methods. If you want to have any other 2-factor for your Magento site,
Contact Us.

• One time passcodes (OTP) over SMS
• OTP over Email
• OTP over SMS and Email
• Phone Verification (OTP Over Call)
• Out of Band SMS
• Out of Band Email
• Soft Token (similar to Google)
• Push Notification
• USB based Hardware token (yubico)
• Security Questions (KBA)
• Mobile Authentication (QR Code authentication)
• Voice Authentication (Biometrics)