User guide

After OTP and SMS Framework are configured (See README), each user will need to opt into OTP.

Steps to enable OTP via SMS

Enable OTP for a user

1. Go to the "Two Factor Authentication" tab on a user.
2. Click "Enable TFA" button.

Add and verify phone number

1. Go to the "Edit" tab on a user.
2. Fill in the phone number field.
3. Click "Save" button.
4. After the page is reloaded, follow the instructions that appear in the phone number field, this includes.
5. After the phone number is verified, the user is now ready to receive OTP codes via SMS.

The phone number must be verified in order for OTP via SMS to work. If a user has no verified phone numbers, then default OTP authenticator app can be used as a fall back.

Using OTP via SMS

1. Go to the user login page
2. Enter the user name and password for the user. Leave the OTP field empty. Click "Login".
3. You will receive a message stating a SMS has been sent to the user.
4. After you get the code from the SMS, come back to the page and re-enter your password, and the code. Click login.