Two-Factor Authentication by Duo

Secure your admin access with two-factor authentication by Duo.

$57.00
+$20.00

This product is electronically distributed.

Overview


Two-Factor Authentication is the most effective way to protect your store against remote attacks. You double up security with a physical device - your smartphone. Attackers cannot access your account without this device.

You will need to have Duo Mobile application installed on your smartphone. It is available for iPhones, Androids, BlackBerry and many more.

The first factor is your username and password for the primary authentication. The second factor can be:

  • code from Duo Mobile;
  • push notification;
  • phone call.

Push notifications are strongly recommended by Duo as a second factor.

How it works

Start authorizing in the store by entering your username and password.

authorizing_by_entering_your_username_and_password

You’ll be suggested to select a method for the second step of authentication.

select_a_method_for_the_second_step_of_authentication

Let’s select Push notification.

select_push_notification

Slide to view the push notification.

Slide_to_view_the_push_notification

Choose Approve.

choose_approve

Your login request has been approved. Authorization is successful. You have logged in to the admin panel of your store.

admin_panel_of_your_store

Setting up the add-on

  1. Install the Two-factor authentication by Duo add-on. Enter the details of your Duo account in the add-on settings.
  2. Enable two-factor authentication under Settings -> Security settings:

security_settings

Setting up authenticator

Set up authenticator for the administrator.

Select the necessary admin under Customers > Administrators.

Open the Editing profile page and switch to the Two-factor authentication tab. Click Enroll.

two-factor_authentication_click_enroll

You will be taken to the Duo website to set up your account. Click Start setup and complete all the steps.

start_setup

You should get the following notice at the end of the setup process:

you_should_get_the_following_notice_at_the_end_of_the_setup_process

Go back to the admin profile and click Check status.

click_check_status

Test your integration by using one of the methods: code from Duo mobile, push notification, or phone call.

Сlick Save the changes.

User guide

Learn more about the add-on in our User guide.

Compatibility

The add-on is compatible with CS-Cart and Multi-Vendor 4.3.1 and above.

legend: [!] fixed  bug, [~] minor changes, [+] new functionality, [-] deleted functionality 

 

January 2019

Version 4.5.0.4

[+] The license and the update option via the upgrade center have been added.

 

November 2018

Version 4.5.0.3

[~] The window for the second step of authentication has been adapted to the height of the screen.

[~] The templates have been adapted to the Smarty 3 standard.

[~] The style files and classes have been refactored.

 

Version 4.5.0.2

[!] The window for the second step of authentication was displayed incorrectly on mobile devices. Fixed.

 

March 2017

Versions 4.3.0.2, 4.4.0.2, 4.5.0.1

[!] Add-on wasn't compatible with php 5.3. Fixed.