Best Way to integrate 2FA in Yves

hatema

Hello,

Has someone experience implementing a 2FA auth for the yves login?

Or an idea how to implement it?

bhupendra.doniwal

following

fsmeier

Heyhey,
I dont have direct experience with implementing MFA or 2FA into Yves, but may have a look at a package from ufirstgroup: https://github.com/ufirstgroup/spryker-second-factor-auth .

It is for the Back Office but since Yves and Back Office work auth-wise very similar you can likely adapt the ideas from there.

Hope this guides you into the direction.

All the best,

Florian

litzmann

https://forum.commercequest.space/discussion/comment/28664#Comment_28664

Necroposting this.

Did anyone use this package yet? Not having MFA in Zed / Backoffice / whatever we call it now was always a bit odd. But for PCI 4.0 there is often no way around MFA for admin-type users anymore. Now, it seems that the excat implementation requirements are very dependent on the PSP's and what requirements they have with the Credit Card companies (I was told some PSPs have rules that directly contradict what our PSP tells us) but for us as PayOne customers, we have to prove our shop has it.

Now technically, Sprykers Backoffice might not fall under the definition of a Cardholder Data Environment if you pinch hard enough - technically the access is not unrestricted as long as your Hosting and Code Hosting has MFA - but these are muddy waters.

Long story short I think everyone having MFA is better than not having it, and I would like to know if anyone has been using this package in Prod already.

Thanks in Advance!
Phillip from COLONS