Two-Factor Authentication by Duo
Secure your admin access with two-factor authentication by Duo.
This product is electronically distributed.
Two-Factor Authentication is the most effective way to protect your store against remote attacks. You double up security with a physical device - your smartphone. Attackers cannot access your account without this device.
You will need to have Duo Mobile application installed on your smartphone. It is available for iPhones, Androids, BlackBerry and many more.
The first factor is your username and password for the primary authentication. The second factor can be:
- code from Duo Mobile;
- push notification;
- phone call.
Push notifications are strongly recommended by Duo as a second factor.
How it works
Start authorizing in the store by entering your username and password.
You’ll be suggested to select a method for the second step of authentication.
Let’s select Push notification.
Slide to view the push notification.
Your login request has been approved. Authorization is successful. You have logged in to the admin panel of your store.
Setting up the add-on
- Install the Two-factor authentication by Duo add-on. Enter the details of your Duo account in the add-on settings.
- Enable two-factor authentication under Settings -> Security settings:
Setting up authenticator
Set up authenticator for the administrator.
Select the necessary admin under Customers > Administrators.
Open the Editing profile page and switch to the Two-factor authentication tab. Click Enroll.
You will be taken to the Duo website to set up your account. Click Start setup and complete all the steps.
You should get the following notice at the end of the setup process:
Go back to the admin profile and click Check status.
Test your integration by using one of the methods: code from Duo mobile, push notification, or phone call.
Сlick Save the changes.
Learn more about the add-on in our User guide.
The add-on is compatible with CS-Cart and Multi-Vendor 4.3.1 and above.
legend: [!] fixed bug, [~] minor changes, [+] new functionality, [-] deleted functionality
[!] The add-on name was not displayed in the upgrade packages. Fixed
[!] An error occurred if the incorrect license key was entered in the add-on settings. Fixed
[+] The license and the update option via the upgrade center have been added.
[~] The window for the second step of authentication has been adapted to the height of the screen.
[~] The templates have been adapted to the Smarty 3 standard.
[~] The style files and classes have been refactored.
[!] The window for the second step of authentication was displayed incorrectly on mobile devices. Fixed.
Versions 184.108.40.206, 220.127.116.11, 18.104.22.168
[!] Add-on wasn't compatible with php 5.3. Fixed.