This is version 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 . It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

In CrushFTP version 9 we can integrate our One Time Password (OTP) based authentication feature with Google's software based token device Google Authenticator , using Time based OTP (TOTP). The server provides a 80-bit secret key , on a per user basis, as a QR code, that can be imported using Authenticator's QR reader.

Server side configuration
#

Will need to enable one of our OTP methods, using SMS or Mail based OTP, and enable the Validated logins checkbox. The user needs to be able to log in at least once, using conventional OTP.



The second step is to configure the user account with Two Factor Authentication



and enable the QR code generator in it's User Options menu

Client / token device configuration
#

The user will need to log in using conventional OTP, generate the QR code form the client UI User Options menu.



Then open Authenticator on the mobile device, set up new account, choose barcode, point the device towards the screen, read in the QR code. Once all set, tap the entry on the screen to generate the one time password to be used. Valid for 30 seconds.

WARNING: the QR code is valid for one minute, if missed the time window, will need to generate new, or it will not save. Will need to incadrate within this time frame to generate the QR code, read it in by Authenticator and save the user settings.
#

Once all set, we will use only the one time password generated