In CrushFTP version 9 we can integrate our One Time Password (OTP) based authentication feature with Google's software based token device Google Authenticator , using Time based OTP (TOTP). The user can register a QR code into Google Authenticator.

Server side configuration
#

You will need to enable one of our OTP methods, using SMS or Mail based OTP, and enable the Validated logins checkbox. The user needs to be able to log in at least once, without OTP, or with the other OTP settings.



The second step is to configure the user account with Two Factor Authentication



and enable the two factor QR code generator which will appear in the user's User Options menu when they are logged in.

Client / token device configuration
#

The user will need to log normally, generate the QR code from the client UI User Options menu.



Then open Authenticator on the mobile device, set up new account, choose barcode, point the device towards the screen, read in the QR code. Then save the user settings by clicking the Confirm button in the UI.



WARNING: the QR code is valid for one minute, if the time window is missed you will need to generate new, or it will not save. Once a secret key has been saved from the QR code, and confirmed, it can only be reset by a server administrator. Its a one time process.