Announcement

Collapse
No announcement yet.

Multiple 2FA

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Multiple 2FA

    Admin users should be able to apply multiple 2FA methods per user. Example: 1 user with both Yubikey and TOTP with Google Auth App capable.

    With many admin users accounts already configured, I would need to create a second (or more) admin users to use a different 2FA Auth method.


    Scott
    Need to offer Shipping Insurance?
    Interactive Design Solutions https://www.myids.net
    MivaMerchant Business Partner | Certified MivaMerchant Web Developer
    Competitive Rates, Custom Modules and Integrations, Store Integration
    AutoBaskets|Advanced Waitlist Integration|Ask about Shipping Insurance Integration
    My T-shirt Collection is mostly MivaCon T-shirts!!

    #2
    Originally posted by ids View Post
    Admin users should be able to apply multiple 2FA methods per user. Example: 1 user with both Yubikey and TOTP with Google Auth App capable.

    With many admin users accounts already configured, I would need to create a second (or more) admin users to use a different 2FA Auth method.


    Scott
    May I ask why one method for the admin user wouldn't be enough? Are you looking to have some sort of backup method for an administrator? Or something that makes it easier to log into multiple devices? Just wondering. LOL, your post just reminded me that I need to get an adapter for my Yubikey to use it on my iPhone and iPad.

    Leslie Kirk
    Miva Certified Developer
    Miva Merchant Specialist since 1997
    Previously of Webs Your Way
    (aka Leslie Nord leslienord)

    Email me: [email protected]
    www.lesliekirk.com

    Follow me: Twitter | Facebook | FourSquare | Pinterest | Flickr

    Comment


      #3
      Well, you kinda implied one of the reasons I see a need mentioning the adapter.

      I would rather use the YubiKey. Except, I am out of USB ports on my desktop. I'd need more hardware in a USB hub to hope it would solve that issue. But, until I had the key, I've set up all my accounts on all the client's stores with TOTP. There is quite a few. That makes plenty of user accounts to manage. Currently, using two users per account because of the 2F hardware is extremely clumsy IMO. I also think it clutters up the client's User screen.

      Scott
      Need to offer Shipping Insurance?
      Interactive Design Solutions https://www.myids.net
      MivaMerchant Business Partner | Certified MivaMerchant Web Developer
      Competitive Rates, Custom Modules and Integrations, Store Integration
      AutoBaskets|Advanced Waitlist Integration|Ask about Shipping Insurance Integration
      My T-shirt Collection is mostly MivaCon T-shirts!!

      Comment


        #4
        Originally posted by ids View Post
        Well, you kinda implied one of the reasons I see a need mentioning the adapter.

        I would rather use the YubiKey. Except, I am out of USB ports on my desktop. I'd need more hardware in a USB hub to hope it would solve that issue. But, until I had the key, I've set up all my accounts on all the client's stores with TOTP. There is quite a few. That makes plenty of user accounts to manage. Currently, using two users per account because of the 2F hardware is extremely clumsy IMO. I also think it clutters up the client's User screen.

        Scott
        I have sort of the same problem - I have an iMac, all my ports are on the back of the monitor. I'm sure that's easy to see what's wrong with that picture. Fortunately in my pile of cables/connectors I have laying around I had a USB extender. I use the extender with my laptop too because trying to put the button just feels like it would break something and I don't want it to be my only USB port. I just discovered that I have the wrong stuff to use my YubiKey on my iPhone 6 Plus. I may have to take your lead and now set up second accounts for all the accounts I manage so I can use TOTP any time I need to access an account on my iPhone or iPad. Now I understand.

        Leslie Kirk
        Miva Certified Developer
        Miva Merchant Specialist since 1997
        Previously of Webs Your Way
        (aka Leslie Nord leslienord)

        Email me: [email protected]
        www.lesliekirk.com

        Follow me: Twitter | Facebook | FourSquare | Pinterest | Flickr

        Comment


          #5
          Couple of things: yes, use an extender...then use a piece of velco tape to fasten the key to the desktop...makes it very convenient, esp like you said ports are in the back or in my case, somewhere under my desk.

          Secondly, just to be clear, you can easily change the 2FA method by simply disabling it, then re enabling it the different method...but yea, I can see that having both might be more convenient that remembering where you hid the backup keys
          Bruce Golub
          Phosphor Media - "Your Success is our Business"

          Improve Your Customer Service | Get MORE Customers | Edit CSS/Javascript/HTML Easily | Make Your Site Faster | Get Indexed by Google | Free Modules | Follow Us on Facebook
          phosphormedia.com

          Comment


            #6
            Originally posted by Bruce - PhosphorMedia View Post
            Couple of things: yes, use an extender...then use a piece of velco tape to fasten the key to the desktop...makes it very convenient, esp like you said ports are in the back or in my case, somewhere under my desk.

            Secondly, just to be clear, you can easily change the 2FA method by simply disabling it, then re enabling it the different method...but yea, I can see that having both might be more convenient that remembering where you hid the backup keys
            Cool tip with the velco, considering I have cats crossing my path throughout the day.

            It's kind of hard to disable the 2FA method if you are on the road with just your cell phone and need to log into a store admin that you have the Yubikey configured for. I guess it's too late to suggest that Miva include a Yubikey that will work with an iPhone
            Leslie Kirk
            Miva Certified Developer
            Miva Merchant Specialist since 1997
            Previously of Webs Your Way
            (aka Leslie Nord leslienord)

            Email me: [email protected]
            www.lesliekirk.com

            Follow me: Twitter | Facebook | FourSquare | Pinterest | Flickr

            Comment


              #7
              Well, you could just create a "Leslie_Mobile" login...and then join my Jihad to have bookmarks portable...

              and for extra fun, place one of the velcro tape tabs on kitty paws and then the other side to random places on the desktop.
              Last edited by Bruce - PhosphorMedia; 02-01-19, 06:06 PM.
              Bruce Golub
              Phosphor Media - "Your Success is our Business"

              Improve Your Customer Service | Get MORE Customers | Edit CSS/Javascript/HTML Easily | Make Your Site Faster | Get Indexed by Google | Free Modules | Follow Us on Facebook
              phosphormedia.com

              Comment

              Working...
              X