How to 2FA-enable Open Source Applications
summary
Concrete how-to: deploy two‑factor for Wordpress/SuiteCRM/NextCloud/RocketChat/OnlyOffice by running Gluu server as an OpenID Connect/SAML IdP, offloading auth so apps become relying parties. Covers OTP (TOTP), SMS via Twilio, Duo, FIDO/U2F and YubiKey, and mobile push (SuperGluu), plus enrollment and delete flows, credential recovery rules (issue two keys), and adaptive steps. Shows CASA self‑service portal and interception scripts in Jython that glue integrations; biometric webcam demo fails but SuperGluu push succeeds.
AI-written summary · about
chapters (15)
- 0:00Start
- 1:18OPEN SOURCE UNDERDOGS
- 4:11How to defeat passwords (partial threat model)
- 4:58Biometrics... the silver bullet? Accuracy of original template?
- 6:14Different types of biometrics Physiological Behavioral
- 6:56Software OTP
- 9:58SMS OTP
- 11:12Mobile Push
- 12:15Phishing resistant authentication?
- 12:49Pesky Man in the Middle (MITM)
- 17:05Why isn't everyone using 2FA? All 2FA technologies involve tradeoffs
- 19:29Microsoft research
- 19:41How do we meet the deployability challenge?
- 21:23You need an equally strong backup key!
- 23:13How does Google do it?
related talks
01h 28mHow to 2FA-enable Open Source Applications
04mNextcloud s Two Factor Authentication
30mDeploying Two-Factor Authentication to Millions of Users
50mA tale of two sides of 2FA
51mWeb APIs for delightful two factor auth experiences
17m2FA in 2020 & Beyond
25mAuthentication Beyond SMS
30mAutomating Multi-Factor Authentication