[Plugin: Google Authenticator] Conflict with Duo Two-Factor Authentication

  • dgw

    (@hidgw)


    11 years, 9 months ago

    I forgot to fill in the Google Authenticator field on my site, and got passed straight to the Duo Authentication screen. I approved the Duo login request from my phone, and was taken straight to my dashboard.

    Deactivating Duo caused leaving the code field blank to reject login, as it should.

    Not sure what can be done about this, but thought I’d report it.

    http://wordpress.org/extend/plugins/google-authenticator/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Henrik Schack

    (@henrikschack)

    11 years, 9 months ago

    Hmm how about only using one Two factor authentication system ?

    Best regards
    Henrik Schack

    Henrik Schack

    (@henrikschack)

    11 years, 9 months ago

    Or in other words: Not really sure what to do about it 🙂
    Best regards
    Henrik Schack

    Thread Starter dgw

    (@hidgw)

    11 years, 9 months ago

    I must say, I’m glad you followed up. That first post by itself wouldn’t have come off very well.

    Anyway, I figure that if two factors is good, three must be better. Maybe at some point I’ll find the conflict.

    Maybe this forum thread holds an idea. It seems relevant. I’ll send it to the Duo developers as well.

    Henrik Schack

    (@henrikschack)

    11 years, 9 months ago

    If I’m understanding the forum thread correctly, it seems you don’t get any additional security by adding an additional authentication method since just one has to succeed.
    Or am I misunderstanding the forum tread ?
    Best regards
    Henrik Schack

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘[Plugin: Google Authenticator] Conflict with Duo Two-Factor Authentication’ is closed to new replies.