Two-factor OATH authentication with Google Authenticator

Google Authenticator allows for adding a dynamic component to a static password for increased account security.

1. Select Management > Users.
2. Find and click the user for whom you want to add the OATH authentication method.
3. Click Add authentication method.
4. From the Type drop-down list, select OATH.

5. Enter password’s static part.

6. From the Token type drop-down list, select HOTP (counter-based).

7. Enter a secret that will be used by Google Authenticator or click . to generate it automatically.

Note

The secret must be a Base32 encoded value.

8. In the Length field, enter 6.

9. Click Save.
10. Launch Google Authenticator and add new service.

Manual entry	QR Code
Select Enter a provided key. Enter account name. Enter the secret defined in OATH authentication method. Note Click . on the user edit form in the Authentication section to reveal the secret. Select Counter based. Select ADD.	Click . on the user configuration form, next to the Secret field in the Authentication section. Select Scan a barcode in Google Authenticator.

11. When logging in, the password string consists of a static password defined in the authentication method and dynamic part generated by the Google Authenticator, e.g. password481418.

Related topics:

• User authentication methods and modes