1. Alfresco and 2 Factor Authentication Ermanno Russo Developer at Zaizi

2. What is 2 factor authentication?

3. Initial setup User. Chooses to setup 2FA Server. Generates a secret. Associates it with the user’s account. Makes it available to the user User. Stores the secret in a specific device

4. Initial setup User. Chooses to setup 2FA Server. Generates a secret. Associates it with the user’s account. Makes it available to the user User. Stores the secret in a specific device

5. How does the login work? User. Device combines secret + current time. Types the code along with credentials

6. How does the login work? User. Device combines secret + current time. Types the code along with credentials Server. Retrieves the user’s secret. Computes the code itself from it

7. How does the login work? User. Device combines secret + current time. Types the code along with credentials Server. Retrieves the user’s secret. Computes the code itself from it. Checks it matches. Checks normal user/password

8. To put it simply Like a second password - Provided by a device - You don't have to remember it - Changes automatically every 30sec - If the device is stolen, the thief still doesn't know your credentials

9. To put it simply Like a second password - Provided by a device - You don't have to remember it - Changes automatically every 30sec - If the device is stolen, the thief still doesn't know your credentials

10. Why use 2 factor authentication? Password

11. Why use 2 factor authentication? (2) Password + code Password + Outdated code

12. What about Alfresco?

13. Google Authenticator IETF RFC 6238

14. S etup screen

16. L ogin screen

18. Device lost - Admin help

19. Reducing manual admin intervention. Saving the secret somewhere safe. Disposable time agnostic codes

20. Reducing manual admin intervention. Saving the secret somewhere safe. Disposable time agnostic codes

21. Conclusion Something you know. Your password Something you have. Your decoding device

22. Resources RFC 6238 http://tools.ietf.org/html/rfc6238 Install Google Authenticator app https://support.google.com/accounts/answer/1066447 ?hl=ens/answer/1066447 ?hl=en Any question welcome erusso@zaizi.comerusso@zaizi.com