Plans to add 2FA?

[zac1333]

I couldn't find this information anywhere so I thought I would post it here...

Are there any plans to add 2FA to WireGuard similar to what's been posted here - https://tunsafe.com/user-guide/2fa ?

[jcoffin]

Soon.

[mikeyscott]

Hopefully authenticator app and Yubikey.

[WebFooL]

now?

Is it in the plans for 16.3 or 16.4?
Really need it about now..

[sky-knight]

TOTP is all I require, I have password managers for the rest.

[jcoffin]

It's in the next version, 16.3

[WebFooL]

Will it be 2FA agains DirecotryConnector or something else?
It would be really sweet if the new Radius Proxy could work with NPS and Azure AD to use the MFA application.
Or Directly from UT use Oauth etc etc..
Would love to Alpha/Beta test :-)

[jcoffin]

Will it be 2FA agains DirecotryConnector or something else?
It would be really sweet if the new Radius Proxy could work with NPS and Azure AD to use the MFA application.
Or Directly from UT use Oauth etc etc..
Would love to Alpha/Beta test :-)

Nothing fancy. It's TOTP based.

[sky-knight]

Nothing fancy. It's TOTP based.

Which means it's trivially integrated with any existing authenticators, yet independent. PERFECT for critical infrastructure.

Everyone here should RECOIL at the concept of Untangle integrating with any sort of SSO on the admin UI. How do you log in when the unit is offline? No... Untangle needs to house the preshared secret of TOTP that can easily be documented and inserted into any authenticator already in use. That way, when you need Untangle it's a 6 digit code away, and the authentication process can be completed entirely within the unit itself so it still works even when completely unplugged and you're climbing into the physical console.

This "nothing fancy" seems rather fancy to me, and anything "more fancy" seems like a terrible idea from this engineer's perhaps not so humble viewpoint.