README

What is it?

A MFA provider for TYPO3 CMS which implements YubiKey OTP authentication

Screenshot

Documentation

Configuration steps:

1. Obtain Yubico Client ID and Secret Key at https://upgrade.yubico.com/getapikey/
2. Enter you Yubico Client ID and Yubico Client Key in the extension settings
3. Switch to backend user settings and choose "Manage multi-factor authentication" in "Account security" tab
4. Setup the "YubiKey OTP MFA authentication" MFA provider by adding at least one YubiKey
5. (Optional) Ensure to set the "YubiKey OTP MFA authentication" as default MFA provider

Using a self-hosted YubiCloud instance

Instead of using the official Yubico YubiCloud validation service, you can run your own OTP validation server. This is useful for organizations that require full control over their infrastructure or cannot use external services.

To use a self-hosted validation server:

1. Set up a self-hosted OTP validation server (see Yubico's self-hosted OTP validation guide)
2. In the extension settings, set the "YubiCloud API URL" to the URL of your own validation server
3. Enter the Client ID and Secret Key configured on your self-hosted instance

Versions

Reporting a Vulnerability

Please report vulnerabilities to security@typo3.org.

Support and updates

The extension is hosted on GitHub. Please report feedback, bugs and change requests directly at https://github.com/derhansen/mfa_yubikey