MasaAuthenticator

This is a Masa CMS Module for implementing Multi-Factor Authentication.

It was orgininaly developed as a Mura module by Steve Withington and forked by We Are Orange BV as a Masa CMS module.

Setup Instructions

• Drop this module into a valid modules directory. For example, {MasaRoot}/modules/MasaAuthenticator
• In the /config/settings.ini.cfm file, set mfa=true and reload Masa CMS
• The next time a user attempts to log in, they will be prompted with instructions on what to do next.

Important Notes

• Once enabled, Masa CMS users must install an authentication app such as Authy (recommended), Google Authenticator (iOS or Apple or Android), or Microsoft Authenticator (Windows Phone, Android, or iOS).
• If a user loses their authentication device, and does not have access to any of their pre-generated backup codes, they will be required to contact the site administrator.

Minimum Requirements

• Masa CMS v7.1+
• Adobe ColdFusion 2016+ or Lucee 5.0+

Future

• Notify user of remaining backup codes (after using one)
• Add ability to regenerate backup codes

Additional Resources

• GoogleAuth by Warren Strange and Enrico M. Crisostomo

License

Copyright 2018 Stephen J. Withington, Jr. and We Are Orange B.V. (and others -- see individual files for additional copyright holders).

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this work except in compliance with the License. You may obtain a copy of the License in the LICENSE file, or at:

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.