Page 1 of 1

Two-Factor Authentication

PostPosted: Fri Mar 03, 2006 10:16 pm
by joyav
Does Servoy support Two-Factor Authentication using RSA Secure-ID, etc?

Or Else, does Servoy support using Windows/SQL logins - as RSA has modules that would incorporate Windows/SQL Login with their two-factor authentication mechanisms.
-AJ

PostPosted: Thu Mar 23, 2006 5:36 pm
by Jan Aleman
You can use Servoy's plugin API to implement any type of specific security. In the 2.2 release you will have to use your own security rules within Servoy and in 3.0 you will be able to integrate with Servoys security as well. With the API you could link to single sign-on, ldap, hardware integration, etc.

Re: Two-Factor Authentication

PostPosted: Thu Jan 10, 2013 7:27 pm
by rieder
What is the current state?

Regards
Birgit

Re: Two-Factor Authentication

PostPosted: Mon Jan 14, 2013 12:53 pm
by Jan Aleman
You can integrate any kind of security you wish today. What do you want to do?

Re: Two-Factor Authentication

PostPosted: Tue Jan 15, 2013 4:50 pm
by huber
Jan Aleman wrote:You can integrate any kind of security you wish today. What do you want to do?


The customer requirement is a two-factor authentication, i. e. for the Web Client access we have to fullfill 2 of the following 3 factors:
- password (standard, no problem)
- Smart Card or
- biometric characteristic, e. g. fingerprint

How is this possible within Servoy (with managable costs)?

Re: Two-Factor Authentication

PostPosted: Tue Jan 15, 2013 5:41 pm
by Jan Aleman
huber wrote:
Jan Aleman wrote:You can integrate any kind of security you wish today. What do you want to do?


The customer requirement is a two-factor authentication, i. e. for the Web Client access we have to fullfill 2 of the following 3 factors:
- password (standard, no problem)
- Smart Card or
- biometric characteristic, e. g. fingerprint

How is this possible within Servoy (with managable costs)?

If the latter two are connected hardware your only option is to go through a java applet or use smart client. A browser can simply not connect to hardware without Java access.... If a type of smartcard that creates codes (often used by banks) is acceptable then simply implement their API serverside. Should be pretty straightforward to do. Easiest two factor is password + SMS but not sure if your client will accept that solution.