TYPO3 CMS extension to enable Google 2FA (two factor authentication) for both, frontend- and backend accounts.
Follow these instructions to enable Google 2FA in your TYPO3 CMS installation.
The extension needs to be installed as any other extension of TYPO3 CMS:
- Switch to the module “Extension Manager”.
- Get the extension
- Get it from the Extension Manager: Press the “Retrieve/Update” button, search for the extension key cf_google_authenticator and import the extension from the repository.
- Get it from typo3.org: You can always get the current version from https://extensions.typo3.org/extension/cf_google_authenticator/ by downloading either the t3x or zip version. Upload the file afterward in the Extension Manager.
- Get it from packagist.org: Add this extension as dependency using Composer:
composer require codefareith/cf-google-authenticator
- Change the extension configuration to your needs
After installing and activating the extension you'll be able to activate 2FA for backend and frontend users.
- Switch to the module "Backend Users"
- Select a user you wish to enable 2FA for
- Navigate to tab "Google Authenticator"
- Check "Enable Google Authenticator"
- Within the Google Authenticator App: scan the provided QR code or set up the authenticator manually by using the given secret
- Fill out "One-time password" with the code created by your App
- Save
On the TYPO3 CMS backend login screen, you'll notice a new field "Google Authenticator Code". If you've activated Google 2FA for your backend user, you'll need to enter the code, generated by the app, to log into your backend account.
If you'll ever lose your Google Authenticator, the only way to disable 2FA is via the database, by setting "tx_cfgoogleauthenticator_enable" to 0, for the desired user.
In order to offer frontend users the possibility to secure their accounts via two-factor authentication, two conditions must be met[1]:
-
in the extension configuration the 2FA must be activated for the frontend (deactivated by default):
- Select the extension module and search for "[codeFareith] Google Authenticator".
- right click on the gear (Configure)
- activate the checkbox under "FE enabled" and then click on "save".
-
via the backend, the necessary plugin must be placed on a page provided for this purpose:
- Select a preferred page via the page module and make sure that it is only accessible for logged in frontend users.
- Then create a new content element on the aforementioned page.
- Under the "Plug-Ins" tab, select "General Plug-In".
- In the next step open the next tab called "Plug-Ins".
- Select "Google Two-Factor-Authentication Setup" from the dropdown and click on save. Done!
[1] After enabling/disabling frontend 2FA, you might need to flush frontend cache in order to show/hide the one-time password field in the login form.
See CHANGELOG.md
