How to configure Google Authenticator with Magento 2 Two-Factor Authentication
Two Factor Authentication for Magento 2 functionality is used to provide the extra security feature to the account. Here’s the method to set up two-factor authentication in Magento 2.4.
The store owner can enable or disable the Magento 2 two-factor authentication as per the requirements. However, it is not best practice to disable Magento 2FA.
Two-factor authentication is widely used, and it is common to generate access codes for different websites on the same app. For example, you might use Google Authenticator to generate codes for the Admin of your store, your magento.com account, Google account, and so on.
Adobe Commerce development supports 2FA methods from multiple providers. Some require the installation of an app that generates a one-time password (OTP) that users enter at sign-in to verify their identity. Universal 2nd Factor (U2F) devices resemble a key fob and generate a unique key to verify identity. Other devices verify identity when they are inserted into a USB port. As the store administrator, you can require one or more of the available 2FA methods to verify user identity. Your 2FA configuration applies to all websites and stores that are associated with the Adobe Commerce installation.
The first time a user signs in to the Admin, they must set up each 2FA method that you require, and verify their identity using the associated app or device. After this initial setup, the user must authenticate with one of the configured methods each time they sign in. Each user’s 2FA information is recorded in their Admin account and can be reset if necessary.
Configure your required 2FA provider(s)
- On the Admin sidebar, go to Stores > Settings > Configuration.
2. In the left panel, click Security and choose 2FA.
3. In the General section, select each Provider to use.
To select multiple methods, hold down the Ctrl key (PC) or the Command key (Mac) and click each item.
4. Complete the settings for each required 2FA method.
5. When complete, click Save Config.
The first time users sign in to the Admin, they must set up each required 2FA method. After this initial setup, they must authenticate with one of the configured methods each time they sign in.
Using Two-Factor Authentication
Google Authenticator
Steps : Set up Google Authenticator
- Enter your account credentials and sign in to the Admin.
When the admin tries to sign in to the admin panel, the message window that requests to configure two-factor authentication is shown.
2. The admin receives an email for further process to configure Magento 2FA.
3. When the admin will click on the link (Click here) received in the mail, will show a window. to select one or more Two Factor Authentication providers to be used to authorize admin users.
4. Select Google Authenticator and click on Apply button. After that admin will see a Bar Code window to scan with the google authenticator app.
5. Open the Google Authenticator app on your mobile device.
- Click the plus sign ( + ) to add a new entry. Then, do the following:
- Line up the red box with the QR code to scan with the camera on your smart phone.
- When it recognizes the QR code and adds an entry, enter that 6-digit code in the Admin Authenticator code field.
- When complete, click Confirm. You will be redirect on Dashboard.
Sign in with Google Authenticator
- Enter your account credentials and sign in to the Admin.
2. Open Google Authenticator on your mobile device.
3. When prompted, enter the six-digit Authentication code.
4. When complete, click Confirm.
That’s all for the Two Factor Authentication for Magento 2.