Configure Two-Factor Authentication for a User's Account

Two-factor authentication has been established over the years as one of the best options for increasing the security of a user account. Starting from version 6.0, Pandora FMS incorporates this functionality by integrating with Google's solution called Google Authenticator®.

To use this functionality, the administrator must have enabled it in the authentication section of the global configuration of the Pandora FMS web console.

It will also be necessary to have the code generation application installed on a mobile device with synchronised date and time:

Operation → Workspace → Edit my user menu.

When you click on it, a section with information about this functionality will appear. After clicking Continue and accepting the dialog box that appears, you will reach the step for generating the secret code. This code will need to be entered into the code generation application.

When creating a new item in the application, two options will appear for creating it:

• Manual entry: The alphanumeric code provided by Pandora FMS must be entered in the Code field, along with a name for the item.
• Scan the code: You will need to grant camera access and scan the QR code provided by Pandora FMS, and the item will be created automatically.

Once created, you can proceed to the next section, after confirming the dialog box, where you will need to confirm that you have correctly completed the procedure by entering the code generated by the application and validating it.

• If the code is valid, the setup will be complete. You can close the information box, and two-factor authentication will be required after successfully logging into Pandora FMS.
• If the code is invalid, you will need to try again or restart the activation by closing the information box.

By unchecking the Double authentication option, a confirmation dialog will appear:

Another option is to contact a Pandora FMS administrator to do it via the PFMS CLI.

←Back to Pandora FMS documentation index