Page MenuHomePhabricator

Investigate 2FA for WMSE nextcloud
Closed, DeclinedPublic

Description

For nextcloud we might also want a 2FA option/requirement. See e.g. https://docs.nextcloud.com/server/11/admin_manual/configuration_user/two_factor-auth.html for this.

Event Timeline

There seems to be several apps for this, among them one official Two Factor TOTP Provider.

If there is an official one and it seems stable then I'd say go with it.

Found this in the output of sudo nextcloud.occ when looking for something else:

twofactorauth
 twofactorauth:disable               Disable two-factor authentication for a user
 twofactorauth:enable                Enable two-factor authentication for a user

It's possible that the same setting is in the admin setting on the site somewhere, but if not, we can find them there.