Is there an alternative way to do a 2 factor authentication for password resets other than SMS?

My company is starting to implement Google Authenticator or other time-based authenticators and we were wondering if it'd be possible in a future release to implement that instead of just SMS.

I realize it'd be a change, so I was just wondering if it'd be possible.

by (440 points)

1 Answer

by (216k points)
0 votes

Update 2019

Starting with Adaxes 2019.2 it is possible to use mobile authenticators (e.g. Google Authenticator, Authy) as a verification step during self-password resets.

Original

Hello,

We don't have such a feature in our short-range and middle-range plans. But thanks for the suggestion, we'll keep this in mind when deciding on features for our future releases.

by (0 points)
0

Hello,

It's been w while ;) and I would like to raise the question again. This is already a popular standard even available in MS ADFS.
There are very often situations where e-mail as 2FA can not be accepted and GSM signal is not available due to the construction of the buildings. Could you speed up implementing a time-based authentication which would simplify the processes and increase security? Can we expect it soon? It would also raise the value of your product.

Best regards.

by (306k points)
0

Hello,

For now, your request regarding the time-based authentication is the only one and we will not implement the feature in the upcoming releases. Maybe, it will be addressed later in future releases.

Related questions

is it possible to allow a user to enroll for both options, or even only one option out of the two available? I would like to give my users the choice to use either. Some users may not want an authenticator, but other's might do.

asked Nov 6, 2019 by mashworth (80 points)
0 votes
1 answer

Can Adaxes be used to push a Google Chrome Plugin to the entire organization? If so how?

asked Apr 29, 2021 by jgresham (20 points)
0 votes
1 answer

Hello, I am trying to give the helpdesk a method of alerting all users in the organization of a service interruption via SMS or email. I was able to create a custom command ... users in an ALL USERS ad group of some sort. Any help would be appreciated. Thanks!

asked Feb 20, 2019 by trwhalen (70 points)
0 votes
1 answer

We would like users to be able to add their mobile number and carrier information from within the web console. Preferably, they would enter their mobile number in a ... ". This address would then be written to an extensionAttribute field in Active Directory.

asked Mar 2, 2016 by Kikaida (1.1k points)
0 votes
0 answers

Is this possible to do by adding a custom provider or would it be a feature request? Thanks Colin.

asked Jul 18, 2014 by ColinB (180 points)
0 votes
0 answers