2FA - Anyone done this?

questions
1

Hey Guys
We just got a request to add 2FA to our Login Procedure.
Anyone have any insight or systems that have worked for them?
We would like to use Microsoft Authenticator as the platform as many of our clients already have this.

Any help or direction would be appreciated.

2

Well, there is plenty of information available about MA and some C# code examples. It could be possible to code an active-x plugin in C# using AI. I think the expert you need to ask is probably @John_Hickey who is deep into this stuff.

Whether he can help with MA depends on a lot of things, including the nature of your application which you haven’t told us anything about?

3

Plenty.

https://clarionhub.com/search?q=2fa

4

Microsoft Authenticator uses standard TOTP ( Time-Based One-Time Password.), so you don’t need anything Microsoft-specific.

At a high level you need to:

  • Generate a per-user secret
  • Show a QR code (otpauth:// format)
  • Validate 6-digit codes using TOTP (30-second window)

In Clarion, especially if you can utilize @John_Hickey Ultimate Com and AI addin, the easiest route would be a small .NET com control helper (e.g. using Otp.NET) and call it from Clarion, rather than implementing HMAC/SHA1 yourself.

Don’t forget:

  • Backup codes
  • Proper enable flow (verify before turning on)
  • Admin reset process

Mark

5

I think you might have meant to link to GitHub - kspearrin/Otp.NET: A .NET implementation of TOTP and HOTP for things like two-factor authentication codes. · GitHub
?

6

Thanks Geoff,

My response didn’t have a link at all, so discourse decided because it looked like a URL to make it one.

I’ve updated my response.

Mark

7

Hi,
Contact https://www.bisware.ca/templates - they do not have their 2FA template listed but talk to them about it. THey generate a QR code and timer for 2FA.
Ron Jolda

8

It may not be relevant, but Capesoft’s Secwin 7 does 2FA

9

Do you have a better way to get ahold of them , i filled in their contact form after you comment and still havent heard back from them

10

Hi Mike,
Try matthew@bisware.ca .
Ron