2fa for clients

[pablosaad]

Hi guys

Someone did install any 2fa plugin to incorporate this feature to the server?

[gbe0]

Hi,

Have you tried the option to force users to re-authenticate to the web interface in order to keep their VPN sessions? It’s in the web UI security area.

This would be something that would be nice to implement into a Firezone client when its available in future to make it more user friendly.

[vadym_p]

Admin MFA Consideration

Hello, everyone! I’ve recently tried your product and am really on fire with this. It covers almost everything that small businesses require. But as a security specialist, I wanted to ask os it is possible somehow to add MFA for admin accounts or allow only SSO with google. Thank you for your attention.

I’ve asked the same question. Currently not.

[jamil]

I’ve asked the same question. Currently not.

Are you referring to TOTP-based 2FA? You can enable it for email/pass authentication for any user, including admins.

If you’d like to limit user auth to only Google, you can set this up via OIDC and then disable local auth.

Or if you have a list of emails you’d like to whitelist for auth, you can create these users first (leave passwords blank), and then disable the auto_create_oidc_users setting.

Does that help? If not, could you clarify a bit more?