It would be great for enhanced security and flexibility if we could rely on more than just the free, public Yubico OTP service when using Yubikeys. Would it be possible to co-operate or integrate with Duo Security?

Comments

Leeteq’s picture

Leeteq commented
Title: Possible to use Duo Security as a second option? » Compatibility with Duo Security and/or TFA (modules)
Related issues: +#2507409: Immediately logged out when using password reset form

Ref.:

https://www.drupal.org/project/duo
https://www.drupal.org/project/tfa

There is also a general discussion about workflow/compatibility when using several modules together, for example with legal module (Terms of service that needs confirmation step in the middle of the login/reset workflow), and workflows for either disabling 2FA, or working around a login problem by using alternate 2FA methods. See the linked TFA module issue: #2507409: Immediately logged out when using password reset form ..:

"I think that it would be generally useful if we took this discussion on a general level that would constitute a "best practise" behaviour and guideline for other module developers that are also figuring out such workflow and cross-module compatibilities."