Contents

Setup TYPO3 Two-factor Authentication (OTP over SMS)

Setup OTP over SMS 2FA method with TYPO3 extension. This guide will help you to configure OTP over SMS as Two Factor Authentication ( 2FA ) method for your TYPO3 site. The TYPO3 2FA extension will add a second layer of authentication to your TYPO3 account to increase the security of your site from unwanted hacks and unauthorized login attempts.

Click here to know more about other features we provide in TYPO3 2 Factor Authentication extension

What is Two Factor Authentication ?

Two-Factor Authentication (2FA) also called two-step verification is a security process in which a user has to pass two different authentication factors to gain access to an account or a computer system.

Two Factor Authentication 2FA for TYPO3 extension is highly secure & easy to set up for your TYPO3 site. Rather than relying on a password alone, which can be phished or guessed. miniOrange adds a second layer of security to your TYPO3 accounts. It protects your site from hacks and unauthorized login attempts.

How does Two-Factor authentication (2FA) work ?

Firstly, the user navigates to the login page of the application or a website. For instance www.example.com/login.
User enters a username and password. User’s login credentials are checked by their respective server. This is the first factor of authentication.
The site then prompts the user with the 2nd step authentication E.g Pop up asking for OTP sent over SMS /Email.
When the user enters the second factor like OTP or Push notification it is checked against the database system if the second factor is correct.
After successfully completing the 2nd factor authentication user is granted access to the application or a website.

Pre-requisites : Download And Installation

Log into your Typo3 instance as an admin.
Navigate to Extensions tab from left pane.
Select Get Extension from the dropdown and search for miniOrange TwoFA and install the extension.
Now select Installed Extensions from the dropdown menu and search for TwoFA and activate the extension.

Setup OTP over SMS 2FA method

For Admin setup OTP over SMS 2FA method
For Customer setup OTP over SMS 2FA method

Register/Login with miniOrange.
Go to the Two Factor Settings tab to enable 2fa during Sign in.
Click on the Enable Two Factor Authentication for Admin to setup Two Factor for Admin's.

TYPO3 2 Factor Authentication (2fa) (mfa) OTP over SMS registration | TYPO3 OTP over SMS verification | TYPO3 sms verification

You can choose specific methods for different roles from the dropdown.

Note: Note down backdoor URL in case you get locked out. Backdoor URL creates a backdoor to login to your TYPO3 website.

Select OTP Over SMS method and click on the Save button.

When you log in the first time, you will be asked to set up two-factor authentication. Let’s see how it works.
Enter your Admin account credentials.
Enter your mobile number to receive OTP on SMS then click on the Save button.
Enter received OTP to the text box and click on the Validate button.
You successfully log in to your Admin account.

Go to the Two Factor Settings tab to enable 2fa during customer registration.
In the Sign in options for the customer section Enable Two Factor Authentication for Customer to setup Two Factor for customer's.

You can select different 2FA methods for different roles or groups of customers.

Then in the ‘ALLOW SPECIFIC 2FA METHODS TO CONFIGURE IN INLINE REGISTRATION’ section OTP Over SMS method for your customers then click on the save button.

When you log in the first time, you will be asked to set up two-factor authentication. Let’s see how it works.
Enter your customer account details.
Enter your mobile number to receive OTP on SMS then click on the Send OTP button.
Enter received OTP and click on the Verify & Next button.
You successfully log in to your customer account.

Your choice of Second factor

miniOrange 2-factor extension is extendable to use any of the following 2FA methods. If you want to have any other 2-factor for your TYPO3 site,
Contact Us.

Mail us on info@xecurify.com for quick guidance(via email/meeting) on your requirement and our team will help you to select the best suitable solution/plan as per your requirement.