Add two factor authentication

[ninja-]

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[geekgonecrazy]

I just got my new YubiKey in the mail so I might take a stab at this. 😁

[ninja-]

I implemented this another way. I recently did a large multi-service LDAP deployment and made the ldap server work that way so it only accepts a password of

<password><your mobile token>.

So 2fa across all the services 👍

[geekgonecrazy]

That works for ldap. For sure want this in Rocket.Chat its self

[ninja-]

sure, I am not stopping you from implementing this. Depending on 2FA implementation in each of the used services started to be annoying so that's just the solution I used.

[marceloschmidt]

+1

[Razer6]

👍

[ghost]

https://ravis.me/2014/12/02/meteor-js-two-factor-authentication/

[geekgonecrazy]

@stephenreda that looks pretty useful! Thanks for sharing

[mmeinert]

+1

[sinteur]

+1

[mrj0b]

+1

[MandMDub]

Is there any upcoming progress on this? I would really love to have this feature or let me know if anyone has any temporary ways to add 2fa to rocket chat.

[sinteur]

if you use nginx you can add this: https://github.com/RobThree/TwoFactorAuth

[geekgonecrazy]

Nice. Had never seen that before.

Also alternative would be force oauth provider and do two factor at that level. Not ideal

[MandMDub]

Is there any other way or any progress of this being added to rocket chat?

[geekgonecrazy]

@MandMDub
Not currently. But as mentioned right above this would be the "other way"

alternative would be force oauth provider and do two factor at that level. Not ideal

[TheReal1604]

@MandMDub Its Not ideal, like the solutions above, but you can work with client certificates too. It's some sort of 2FA. ;-)

[mmeinert]

@ninja- could you please tell me/us how you did it ?

[JSzaszvari]

I wonder if this will work at the moment through the SAML provider using someone like https://duo.com

I might give it a go.

[geekgonecrazy]

@JSzaszvari i'd think it would.

[chellem]

Is there any update on this new feature? It would be very interesting to add two factor authentication.

[sebeard]

Interested in this as well. U2F would be ideal using something like yubikey would be great!!!