Configuring double authentication for a user account

For years, double authentication has been positioned as one of the best options to increase user account security. Starting with version 6.0, Pandora FMS incorporates this feature by integrating with the Google® solution called Google Authenticator®.

To use this feature, administrators should have activated it in the authentication section of the global configuration of Pandora FMS Web Console.

It will also be necessary to have the code generator application on a mobile device with synchronized date and time:

Operation → Workspace → Edit my user menu.

When you click on it, a section with information about this feature will appear. After clicking Continue and accepting the dialog box that appears, you will reach the secret code generation step. This code will be the one you will have to enter in the code generation application.

When creating a new item in the application, you will see that there are two options for creating it.

• Manual entry: The alphanumeric code provided by Pandora FMS must be entered in the Code field and a name for the item.
• Scan the code: Access the camera and scan the QR code provided by Pandora FMS and the item will be created automatically.

Once created, you may proceed to the next section, after verifying again a dialog box, in which you must confirm that you correctly performed the procedure by entering the code generated by the application and then validating it.

• If the code is valid, setup is finished. The information box may be closed and double authentication will be necessary after successfully logging into Pandora FMS.
• If the code is not valid, you will have to try again or restart activation by closing the information box.

When unchecking the Double authentication option, a confirmation dialog box will appear:

Another option is to resort to a Pandora FMS administrator to do it through PFMS CLI.

Back to Pandora FMS Documentation Index