RE: Jetspeed portal - MFA implementation

Thanks David for your inputs.

I am looking for extra authentication feature along with existing Jetspeed =
authentication.

Immediately after user logs into portal,  and before he can access any othe=
r portal functionality, he should be asked to verify his identity by enteri=
ng code (One Time Code) sent over registered email or phone number using so=
me mechanism like SMS or email gateway.
One successful then only user  is allowed to access portal feature.

This is required as part of Multi Factor Authentication.

Thanks
Dnyaneshwar

-----Original Message-----
From: DavidSeanTaylor [mailto:[email protected]]
Sent: Tuesday, December 05, 2017 1:15 AM
To: Jetspeed Developers List <[email protected]>
Subject: Re: Jetspeed portal - MFA implementation

I have not tried this, but I suggest that to support a One Time Password fe=
ature, Step 2 would have to additionally do something like:

pwc.setExpirationDate();
pwc.setExpired();

> On Dec 4, 2017, at 7:16 AM, Dnyaneshwar Dabhade <dnyaneshwar.Dabhade@maje=
sco.com> wrote:
>
> Team,
> Is there any Portlet or feature available with Jetspeed portal. I am look=
ing to see if we can send OTP and use user's email id for 2 step authentica=
tion.
>
> Thanks
> Dnyaneshwar
>
> -----Original Message-----
> From: DavidSeanTaylor [mailto:[email protected] <mailto:david@bluesun=
rise.com>]
> Sent: Friday, December 01, 2017 9:51 PM
> To: Jetspeed Developers List <[email protected] <mailto:jet=
[email protected]>>
> Subject: Re: Jetspeed portal - MFA implementation
>
> The MFA Portlet is documented here:
>
> https://portals.apache.org/jetspeed-2/applications/mfa.html <https://port=
als.apache.org/jetspeed-2/applications/mfa.html> <https://portals.apache.or=
g/jetspeed-2/applications/mfa.html <https://portals.apache.org/jetspeed-2/a=
pplications/mfa.html>>
>
> there is one portlet, MFALogin, included in the j2-admin app
>
>> On Dec 1, 2017, at 5:10 AM, Dnyaneshwar Dabhade <dnyaneshwar.Dabhade@maj=
esco.com> wrote:
>>
>> Hello Team,
>>
>> I am trying to implement and enable Multi Factor Authentication in our J=
etspeed Portal. I see some folders in j2-admin related to MFA.
>> Let us know if anyone have experience of implementing it. We are using t=
he Jetspeed version 2.3.0.
>> Your help is really appreciated.
>>
>> Thanks
>> Dnyaneshwar
>>
>> CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY ATTAC=
HMENTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN CONFIDENTIA=
L AND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED FROM DISCLOSUR=
E. IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE OR THEIR AGENT, OR=
 IF THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, PLEASE IMMEDIATELY ALE=
RT THE SENDER BY REPLY EMAIL AND THEN DELETE THIS MESSAGE AND ANY ATTACHMEN=
TS. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT ANY=
 USE, DISSEMINATION, COPYING, OR STORAGE OF THIS MESSAGE OR ITS ATTACHMENTS=
 IS STRICTLY PROHIBITED.
>
> CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY ATTACH=
MENTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN CONFIDENTIAL=
 AND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED FROM DISCLOSURE=
. IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE OR THEIR AGENT, OR =
IF THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, PLEASE IMMEDIATELY ALER=
T THE SENDER BY REPLY EMAIL AND THEN DELETE THIS MESSAGE AND ANY ATTACHMENT=
S. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT ANY =
USE, DISSEMINATION, COPYING, OR STORAGE OF THIS MESSAGE OR ITS ATTACHMENTS =
IS STRICTLY PROHIBITED.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected] <mail=
to:[email protected]>
> For additional commands, e-mail: [email protected] <ma=
ilto:[email protected]>
CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY ATTACHME=
NTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN CONFIDENTIAL A=
ND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED FROM DISCLOSURE. =
IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE OR THEIR AGENT, OR IF=
 THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, PLEASE IMMEDIATELY ALERT =
THE SENDER BY REPLY EMAIL AND THEN DELETE THIS MESSAGE AND ANY ATTACHMENTS.=
 IF YOU ARE NOT THE INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT ANY US=
E, DISSEMINATION, COPYING, OR STORAGE OF THIS MESSAGE OR ITS ATTACHMENTS IS=
 STRICTLY PROHIBITED.