1.7 KiB
| title |
|---|
| DP-Salad Configuration |
Authy/Duo Configuration
This is like one of those "Choose Your Own Adventure" books! Pick one, not the other, it may be hard to swap later on. You may be able to give your user a choice too! 2FA is handled by either Authelia using an 8 digit code that generates through Authy :logos-authy: or it can be passed off to Duo :simple-icons-cisco: to handle, and then "reinjected" back into the authentication process later on. I'll outline steps for both, and you can choose the method(s) you want your users to be able to 2FA.
Authy is probably the easiest, and the cheapest way to configure 2FA, especially if you are going to have more than 5 users.
The default for the SALA/D Stack for 2FA for the more technical people is SHA1, 8 Digits
All this means for the user is what applications are supported, list is below:
- Bitwarden :simple-icons-bitwarden: / Vaultwarden :simple-icons-vaultwarden: (Password Managers, Vaultwarden can be selfhosted!, 2FA is setup in addition to account)
- Authy :logos-authy: (Recommended application, named as the best for the stack)
- Aegis (Supported, never used. YMMV)
These three options are supported for 2FA for Authelia :simple-icons-authelia:. It is recommended to actually set this up, as it prevents complete lockouts.
Duo :simple-icons-cisco: is another way to configure 2FA. If you enable Duo 2FA, you'll need to consult the documentation for Duo setup via Authelia, I've linked some setup links here.
https://www.authelia.com/configuration/second-factor/duo/
https://www.authelia.com/overview/authentication/push-notification/
You'll need to modify the configuration of Authelia to finish the setup of 2FA via Duo.