Including 2fa

[Nhoya]

What about including 2fa for login?

[olljanat]

Duplicate with #1590 ?

[Svarto]

Is this the issue where this feature is being tracked? I am a bit confused as we are having two issues that are referenced to eachother.

[olljanat]

@Svarto yes. That why #1590 is closed

[deviantony]

Closing as this can now be achieved through the External Authentication extension by using an OAuth provider with 2-FA authentication enabled.

[JaneX8]

I think this is a really a missed feature. Yes external authentication might support it but one might choose not to use third parties on purpose. HOTP/TOTP is fairy simple to implement and it's an open and free standard.

I think the wish of the community is clear considering #1590 and the 49 thumbs up on this issue at time of writing, the 6 thumbs down on the last @deviantony comment and the mention after that. I really miss this feature and would sleep way better knowing that I have TFA enabled on my portainer instance.

[dev-danim]

I'm really sorry to see all these thumbs down for @deviantony, who truly is a great dev.

But I also think that this feature is critically important nowadays. 2FA is everywhere (github, gitlab, aws, npm, docker, etc.), and reassures CEOs quite a lot (and I think that's justified).

Besides, I think that blocking "Hide internal authentication prompt" by making it a Business feature is an error. This is related to companies safety, and is quite discouraging.

[timnolte]

Hmm, even though this is a year+ closed it is a big shame that this isn't included when using the internal authentication. Yes, I can setup any number of OAuth providers but that is additional overhead when dealing with small teams, or just me as an individual using the free 5 instance business license.

[Loqova]

I cannot believe this is still an issue in 2023 and we're forced to use OAuth instead of simply allowing standard HOTP. Very disappointing for a tool like Portainer.

Two more issues about this:

• [Feature Request] Add support for U2F/FIDO #1590
• Why the paywall for security? #3582