{"id":30738,"date":"2014-07-22T05:51:35","date_gmt":"2014-07-22T05:51:35","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/strong-authentication\/"},"modified":"2019-08-13T14:31:21","modified_gmt":"2019-08-13T14:31:21","slug":"strong-authentication","status":"closed","type":"plugin","link":"https:\/\/sl.wordpress.org\/plugins\/strong-authentication\/","author":8076123,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.2.1","stable_tag":"trunk","tested":"5.1.22","requires":"3.6","requires_php":"","requires_plugins":"","header_name":"Strong Authentication","header_author":"Cornelius K\u00f6lbel","header_description":"","assets_banners_color":"","last_updated":"2019-08-13 14:31:21","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/github.com\/cornelinux\/wp-strong-authentication","header_author_uri":"","rating":0,"author_block_rating":0,"active_installs":10,"downloads":2425,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":[],"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":[],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[9210,59241,39818,1909],"plugin_category":[],"plugin_contributors":[],"plugin_business_model":[],"class_list":["post-30738","plugin","type-plugin","status-closed","hentry","plugin_tags-otp","plugin_tags-privacyidea","plugin_tags-strong-authentication","plugin_tags-two-factor-authentication","plugin_committers-cornelinux"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/strong-authentication.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Wordpress Strong Authentication lets you authenticate users with a second\nfactor of possession.<\/p>\n\n<p>Only if the user is able to provide this second factor, he is allowed to login.\nSuch a second factor can be an OTP display card, an OTP hardware token, a Yubikey,\na smartphone App like the Google Authenticator or access to an mobile phone\nto receive an SMS or access to an email account.<\/p>\n\n<p>The use then needs to authenticate with his wordpress password and in addition with\na code, generated by his device or sent via email or SMS.<\/p>\n\n<p>All the devices are managed in the backend (privacyIDEA)[http:\/\/privacyidea.org], the Strong Authentication\nplugin forwards authentication requests to this backend, which you can easily run\non the same machine or anywhere in your network.<\/p>\n\n<h3>Configuration<\/h3>\n\n<p>Please add at least a hostname or IP address of your backend server privacyIDEA.\nYou need to enter the hostname together with the protocol and the port, if it is\nnot a standard port.\nIf you are using self signed certificates, you should disable the verification of hostname and peer.<\/p>\n\n<p>Please note: You need to have the same users in the LinOTP server. \nYou can achieve this by configuring an SQL Resolver and presetting this to\nWordpress.<\/p>\n\n<h3>Troubleshooting<\/h3>\n\n<p>If you misconfigured the plugin, you might not be able to authenticate anymore!<\/p>\n\n<p>So it is always a good idea to add some users to the \"excluded users\" list.\nThese users will be able to authenticate without a second factor and\neven if the authentication server should be down.<\/p>\n\n<p>Another possibility is to disable the plugin by removing or renaming the \nplugin directory.\nIn this case is will fall back to the old wordpress passwords.<\/p>\n\n<!--section=installation-->\n<p>You can install this plugin from within your wordpress plugin menu.<\/p>\n\n<p>Alternatively you can install it manually:<\/p>\n\n<p>For installing the wordpress plugin simply copy the file \nwp-strong-authentication.php to the wordpress directory<\/p>\n\n<p>.\/wp-content\/plugins<\/p>\n\n<!--section=faq-->\n<p>Q: What happens if my authentication backend is offline?<\/p>\n\n<p>A: If your authentication backend is offline, the users are not able\n   to authenticate with OTP. This is the same as if you SQL server is down\n   or your LDAP server is not reachable.<\/p>\n\n<p>Alas, you can configure certain users, who will not be authenticated against\n   the backend but within wordpres. This can be an emergency entry.<\/p>\n\n<!--section=changelog-->\n<p>1.2.1<\/p>\n\n<ul>\n<li>Use PHP curl for a better communitcation to the privacyIDEA server<\/li>\n<\/ul>\n\n<p>1.2<\/p>\n\n<ul>\n<li>Add user-agent to POST request<\/li>\n<\/ul>\n\n<p>1.1.1<\/p>\n\n<ul>\n<li>Fixed and error in displaying errors :-\/ <\/li>\n<\/ul>\n\n<p>1.1<\/p>\n\n<ul>\n<li>remove php curl and use WP HTTP class instead<\/li>\n<\/ul>\n\n<p>1.0<\/p>\n\n<ul>\n<li>Add possibility to exclude users from two factor authentication<\/li>\n<\/ul>","raw_excerpt":"Wordpress Strong Authentication lets you authenticate users with a second","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/30738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=30738"}],"author":[{"embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/cornelinux"}],"wp:attachment":[{"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=30738"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=30738"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=30738"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=30738"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=30738"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/sl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=30738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}