It would be very practical if we could enable for example both TFA and the https://www.drupal.org/project/yubikey module at the same time, and let users choose which one to use as the second factor. Sometimes use TFA, and other times the Yubikey: each login should offer the choice between the 2FA modules.

The typical scenario is sites that do not want to enforce either using smartphones or TOTP applications, nor having/getting a Yubikey, but to allow the other users who already have one or both to decide for themselves which one to use.

I think all the modules like TFA, Yubikey and Duo should play nice together.

Comments

Leeteq created an issue. See original summary.

c-logemann’s picture

c-logemann
he/him
Primary language German
Location Frankfurt/M, Germany
commented
Status: Active » Closed (works as designed)

Without taking in deeper look inside the modules yubikey and duo I think they provide an own two factor login-Process. So maybe it isn't easy to get these modules working together.
But the concept of the TFA-Module itself is providing an API for connecting different technologies working together. The easiest way to use Yubikey and Duo strategies is doing the same as the TFA basic Modul. Maybe the existing modules can be improved in this way or we need new modules doing this.
Because the TFA Module is already providing the API for connecting other technologies it's already providing the functionality you are looking for I change the status to "Closed (works as designed)".

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

There is now a module called Two Factor Authentication for Duo Security - tfa_duo which lets the duo system work inside of the TFA system along side TOTP.

There is not yet, afaik, a module to support yubikey and tfa, but that seems like a logical next step.

pjcdawkins’s picture

pjcdawkins commented

For Yubikey support (in D8), look to https://www.drupal.org/project/tfa_u2f

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

Thanks, pjcdawkins!