Forum Discussion

Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Jun 11, 2019

Google Authenticator implementation

Hello, we want to configure MFA/2FA using Google Authenticator (or at least the underlying time-based one-time password (TOTP) solution). We found several articles and guides here on DevCentral, bu...
BIG-IP Access Policy Manager (APM)
LTM
mfa
security
Denis_Figeys's avatar
Denis_Figeys
Icon for Nimbostratus rankNimbostratus
Mar 03, 2020

Stefan,

 

Many thanks for updating and optimizing the code. as I am looking at implementing such solution.

 

Unfortunately, there is one important missing part in all the documentation I read this far: how to automate user registration. I have over 500 users, it is not possible and not sustainable to manually add them in the local datagroup. Provisioning should be self-service.

 

Anyone has a solution for implementing auto-provisioning of users and passcode or, did you all use the same passcode for all users?

 

Thanks!!

  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Mar 03, 2020

    Hi Denis,

     

    I've implemented auto-enrollment with Google Authenticator with use of this code from Cody Green. It's lacks good documentation, but it works.

     

    https://github.com/codygreen/F5-MFA

     

    Kind regards,

     

    --Niels

    • Denis_Figeys's avatar
      Denis_Figeys
      Icon for Nimbostratus rankNimbostratus
      Mar 04, 2020

      Thanks Niels... looks a bit like hacking the system. I wish F5 would have provided us a better, standard way of achieving this.

       

      Regards, Denis.