I couldn't find this information anywhere so I thought I would post it here...
Are there any plans to add 2FA to WireGuard similar to what's been posted here - https://tunsafe.com/user-guide/2fa ?
I couldn't find this information anywhere so I thought I would post it here...
Are there any plans to add 2FA to WireGuard similar to what's been posted here - https://tunsafe.com/user-guide/2fa ?
Soon.
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
Hopefully authenticator app and Yubikey.
now?
Is it in the plans for 16.3 or 16.4?
Really need it about now..
TOTP is all I require, I have password managers for the rest.
Rob Sandling, BS:SWE, MCP
NexgenAppliances.com
Phone: 866-794-8879 x201
Email: support@nexgenappliances.com
It's in the next version, 16.3
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
Will it be 2FA agains DirecotryConnector or something else?
It would be really sweet if the new Radius Proxy could work with NPS and Azure AD to use the MFA application.
Or Directly from UT use Oauth etc etc..
Would love to Alpha/Beta test :-)
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
Which means it's trivially integrated with any existing authenticators, yet independent. PERFECT for critical infrastructure.
Everyone here should RECOIL at the concept of Untangle integrating with any sort of SSO on the admin UI. How do you log in when the unit is offline? No... Untangle needs to house the preshared secret of TOTP that can easily be documented and inserted into any authenticator already in use. That way, when you need Untangle it's a 6 digit code away, and the authentication process can be completed entirely within the unit itself so it still works even when completely unplugged and you're climbing into the physical console.
This "nothing fancy" seems rather fancy to me, and anything "more fancy" seems like a terrible idea from this engineer's perhaps not so humble viewpoint.
Rob Sandling, BS:SWE, MCP
NexgenAppliances.com
Phone: 866-794-8879 x201
Email: support@nexgenappliances.com