Two-factor authentication in API Portal

[Legacy User]

Hello,

anyone was trying to implement two-factor authentication in API Developer Portal 3.5 CR6? As I know there isn't such an feature out-of-the-box.

My idea was to overwrite login form and implement it somewhere there but I can't find login form in repository (/opt/Deployemnt/lrs/repository). It’s looks like this form is somewhere hardcoded.

[William Forsyth]

I have not done this personally but am thinking the auth work would be done in the Portal Authentication and Management Service and you would need to modify the Portal Login page and pass two-factor credentials to gateway if for two-factor authentication.  Can you provide more details on the two-factor flow for your requirements and perhaps a mock-up of a login page? 

 

Thanks, Alex.

CA Tech - Architecture. 

[wkow]

Hi Alex,

Would you like to give some tips, how to modify Portal login page? Should I modify /SYSTEM/stylesheets/login/login.xsl?

 

Cheers

 

Wojciech

[Legacy User]

Hello Alex,

thanks for your response. The flow should be pretty standard for this kind of implementation.

 

First of all user should log in in standard way, providing login and password. Next, if provided data are correct, display form  with some information and input box for code should appear. The code will be send by SMS. The combination of login/password and code from SMS will login into portal.

The engine for SMS send and verification is on our customer site.

 

We don't have mock-up of a login page for now.

 

Thanks,

Bartosz

[Zhijun He]

Hello BARTOSZ Małż ,

FYI, the MAG(mobile api gateway) already has an implementation of OTP (one time password) which supports SMS and email for two-factor authentication, for more details, please refer to,

One-Time Password Policies - CA Mobile API Gateway - 4.1 - CA Technologies Documentation 

 

But integrate portal with OTP might not be so simple, such as role mapping, etc.

 

Regards,

Mark

[Stephen Hughes]

Good afternoon,

 

Were you able to resolve the issue? What was the final result?

 

Sincerely,

Stephen Hughes
Broadcom Support

[Legacy User]

Hello Stephen_Hughes,

 

Of course it is not resolved. I have tried many things but every, even minor change in GUI (like 2FA) in portal looks like is impossible to implement.

 

Regards,

Bartosz

[Eduard Palomeras]

Hi,

 

Is the flow you depict the only acceptable solution?

I wonder if it would be acceptable if you carry over the two step authentication in another box (a SAML Identity Provider, for instance CA Advanced Authentication) and then convey the authentication to the CA API Portal through standar SAML federation.

 

regards,