Two-factor authentication (2FA) is an additional security measure that protects user accounts from unauthorized access. In addition to entering a username and password, a second, independent security factor is required during login. This can be, for example, a time-limited verification code from an authenticator app or a physical security key. This prevents unauthorized individuals from logging in using only a stolen or compromised password. Enabling 2FA thus significantly increases the security of the user account and reduces the risk of data misuse and unauthorized access.
You can enable two-factor authentication in VIMP under Configuration -> Authentication -> Two-Factor Authentication.
In addition, you can specify an allowed time deviation between the server and the device used for authentication (in seconds) and determine which authentication methods are available (PIN, QR code, or both).
The following role permission must be enabled if a role is to be able to use 2FA:
allow two factor authentication
You can set these under “Roles & Permissions” for the corresponding roles.
You can also specify for each role whether 2FA is required:
Users can enable 2FA in their profile under “Settings”:
After clicking the button, depending on the configuration, either the QR code to be scanned and/or the setup key to be entered will appear:
For authentication, use an authenticator app such as Microsoft Authenticator or Google Authenticator.
After you've scanned the QR code with your Authenticator app or entered the setup key, confirm the code in VIMP by clicking the button:
Two-factor authentication is now set up.
If the user no longer wishes to use 2FA, they can disable it at any time in their profile here:
If 2FA is enabled, a confirmation field for two-factor authentication will appear after you enter your login credentials:
Enter the code displayed in your Authenticator app here.
Once you enter the last digit, you will be automatically redirected to the portal, provided the sequence of numbers is correct.