How to enable/disable Microsoft 2FA [Two factor Authentication]

1. How to enable Microsoft 2FA (Two-factor Authentication) in Ezeelogin?

Note: Microsoft Authenticator doesn’t require any internet connection.

1. Navigate to Settings -> General -> Two Factor Authentication -> Enable Google Authenticator.

2. After enabling Google Authenticator refresh the Ezeelogin Software GUI and navigate to Account -> Google Authenticator

3. Click on the ' Set ' button and scan the QR code with the Microsoft Authenticator App.

Download Microsoft Authenticator Application from Appstore/play store for ios/android and install it on your phones

Re-login to web GUI using Microsoft 2fa

google 2fa

The backend 2fa method will also be now using Microsoft Authenticator.

google authenticator code

Ensure that the time on the Jump server is accurate. Use the command #ntpdate pool.ntp.org to sync the server time. Also, do ensure that the mobile phone times are also in sync with your mobile operator's time.

2. How to share the same Microsoft authenticator code with different users?

1. Login to GUI, enable Google authenticator 2FA from settings. Navigate to Accounts tab -> Google authenticator -> Set -> Copy the secret and share with other users. Now all the user with same secret can login to both GUI and shell with the same Microsoft code.

3. How to disable Microsoft 2FA (Two-factor Authentication) from the backend?

Note: If you lost your phone, you can use this method.

Run the below commands to disable and clear Microsoft authenticator. Replace username to disable Microsoft authenticator for that user.

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings set value='N' where(name='enable_google_authenticator')"
root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_users set egs=NULL where username='ezadmin'"

No Two-factor Authentication enabled

This error happens when we enforce Two-Factor authentication without enabling any of the Two-Factor authentications. Run the following command to disable Force Two Factor Authentication.

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings SET value = 0 WHERE name = 'two_factor_auth'"
root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php  "update prefix_usergroups SET force_tfa = 'N'"

4. How to disable Microsoft 2FA (Two-factor Authentication) from the GUI?

Related Articles