This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Adding two-factor authentication to ASP.NET"

From OWASP
Jump to: navigation, search
(Initial layout)
 
Line 2: Line 2:
  
 
==Description==
 
==Description==
 +
 +
If you wish to add two factor authentication to your site you can use [http://lachlanbarclay.net Lachlan Barclay's] [https://www.nuget.org/packages/AddTwoFactorToMvc/ NuGet Package] which contains all the code you need.
 +
 +
This method is uses [http://www.asp.net/identity ASP.NET's Identity] and [https://en.wikipedia.org/wiki/Google_Authenticator Google's "Authenticator"] app. The authenticator app is simple, very widely used (GitHub and Slack, to name two) and works very well.
 +
 +
If you are adding two-factor authentication to an existing site or codebase, I start by creating a brand new project and adding the already-prepared NuGet package. This will add all of the necessary code, web pages, references and dependencies.
  
  

Revision as of 03:11, 4 March 2016

DRAFT DOCUMENT - WORK IN PROGRESS

Description

If you wish to add two factor authentication to your site you can use Lachlan Barclay's NuGet Package which contains all the code you need.

This method is uses ASP.NET's Identity and Google's "Authenticator" app. The authenticator app is simple, very widely used (GitHub and Slack, to name two) and works very well.

If you are adding two-factor authentication to an existing site or codebase, I start by creating a brand new project and adding the already-prepared NuGet package. This will add all of the necessary code, web pages, references and dependencies.


Risk Factors

Related Attacks

Related Vulnerabilities

Related Controls

Related Technical Impacts

References