Two-factor authentication

[mccharlet]

Hi,

For the security

Posibility to active "Two-factor authentication" for a ispconfig account (admin by exemple)

To posibility

- duosecurity

- Yubikey

Thanks

[ressel]

Originally Posted by mccharlet

Hi,

For the security

Posibility to active "Two-factor authentication" for a ispconfig account (admin by exemple)

To posibility

- duosecurity

- Yubikey

Thanks

Yes that would be very nice!

Maybe soft token could be used on etc. android tablet/phone
like etc http://www.dynalogin.org/

[Kynao]

I vote for it too

[theWeird]

What would you think of this:
http://www.dynalogin.org/

I see the following benefits:
- Self hosted (and self controlled) 2nd auth step
- uses standards to support different hardware- and soft-tokens
- comes with an android soft-token with sourcecode -> so you can brand it with your own logo
- can act as OpenID provider

-> Next Idea for ISPConfig: New Flag "Disable OpenID" to Mail Users and pass not-activated mail users to Dynalogin for authentication via OpenID.
Could be done by including a subdomain 'id' to each zone which points to the DynaLogin-Server.
So my OpenID URL would be http://id.customerdom.ain/theWeird