Skip to content

Two Factor Authentication (2FA)

Jump to bottom
Jonas Breder edited this page Oct 27, 2026 · 1 revision

To secure administrative accounts, hroot supports Time-based One-Time Passwords (TOTP) for two-factor authentication.

1. Enabling 2FA

  • Configuration Location: Navigate to Site Settings -> Plugins / Features (/admin/options/features under System & Plugins).
  • Global Settings: Check the box Admin Zwei-Faktor-Authentifizierung (2FA) (enable_admin_2fa). Once active, TOTP 2FA is required for all accounts with the roles admin and banking_admin.
  • Setup: Upon logging in, staff members are prompted to scan a QR code using an authenticator app (e.g. Google Authenticator, Bitwarden) and verify the setup with a one-time code.
  • Remember Device: Users can check "Trust this device" during login to remember the browser for 90 days.

2. Resetting 2FA Tokens

  • Admin Reset: If a staff member loses access to their authenticator device, administrators can reset the 2FA configuration in the user's profile settings. This clears the TOTP secret and allows the user to re-register their device upon their next login.

HROOT - Hamburg Registration and Organization Online Tool

  1. Installation

    1. System Requirements and Prerequisites

    2. Docker (precompiled)

    3. Docker (self-compiled)

    4. Manual Deployment

    5. First steps after installation

    6. Backup and Maintenance

    7. Starting a local server and running automated tests

    8. Basic configuration

    9. Language configuration and timezone

    10. Custom field definitions

  2. Updating an existing installation

  3. Overview

    1. Roles: Users, Admins, Experimenters, Banking‐Administrators
    2. Experiments, Sessions, session types
    3. Monitoring, Dashboards and Reporting

  4. Subject pool and user management

    1. Pools Management
    2. Browsing the pool
    3. Exporting data
    4. Adding users
    5. Deleting users
    6. Finding duplicate users
    7. More user management

  5. Experiment management

    1. Managing Experiments
    2. Procedures (Ablaufpläne)
    3. Adding Sessions
    4. Experiment and Session Inheritance
    5. Assign participants from the pool
    6. Inviting participants
    7. Invitations Scheduling and Digests
    8. Session management
    9. Waiting list
    10. Admission

  6. Sending messages

    1. Invitation emails
    2. Confirmation emails
    3. Session reminder emails
    4. SMS and Push Notifications

  7. Managing your lab

    1. Calendar and Room Booking
    2. Staff Management
    3. Finance

  8. Settings

    1. Environment Configuration
    2. Default locale and date formats
    3. Shibboleth Integration
    4. Kimai Integration

Clone this wiki locally