Configuring Two Factor Authentication
Two factor authentication (2FA) provides extra security to OpenKM login. In addition to the typical login and password, once the user is authenticated, will be asked for an extra six digits code generate in a mobile application called Google Authenticator.
Prerequisite
Because two factor authentication has been implemented using Google Authenticator, it is necessary to download and install the application from Google Play or Apple market.
https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2
Once installed and configured, this application does not event need Internet connection.
OpenKM configuration
Each user can configure his own account to use 2FA. To do it, he has to go to Tools > Preferences > User Configuration.
If 2FA was enabled by the administrador, at the bottom of the User Configuration dialog you would be able to see a new option 2FA. Depending on whether 2FA is enabled ypu would see:
- Disable button: is 2FA was already configured for this user.
- Enable button: is 2FA has not been configured yet.
If you click on enable button, a new window with the following parameters will appear:
- The current user id to be configured.
- A QR code which you should scan from Google Authenticator application.
- A text box where you have to write the verification code generated by Google Authenticator (once QR code has been scanned).
Once you have complete these steps, please click on the accept button.
Scan QR code
To scan the QR code, open Google Authenticator on your mobile and perfom the following steps:
- Click on configure account.
- Select Scan code.
- Focus the mobile toward the the QR image of the screen.
- Once the image is properly scanned the accound for OpenKM is added.
- Now you will see a square with a number (code) which you will have to introduce when required.
These generated codes are time based: they will expiry every 60 seconds. If you pay attention to Google Authenticator screen, you will see how the code changes every period of time.
Google Authenticator use
Once 2FA is configured on your OpenKM account, next time you log into OpenKM, after your login and password are verified, a new screen will appear, where it will be required to fill in, a code that it will have to be obtained from the application previously configured inside Google Authenticator application.
