Re: Jetspeed portal - MFA implementation

--Apple-Mail=_AF1DF46D-CC1C-4E01-A998-309EEB3F0082
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Jetspeed can send emails via the =
org.apache.jetspeed.administration.PortalAdministration API

Apache Camel might be a good solution for SMS:

http://camel.apache.org/smpp.html



> On Dec 5, 2017, at 4:05 AM, Dnyaneshwar Dabhade =
<[email protected]> wrote:
>=20
> Thanks David for your inputs.
>=20
> I am looking for extra authentication feature along with existing =
Jetspeed authentication.
>=20
> Immediately after user logs into portal,  and before he can access any =
other portal functionality, he should be asked to verify his identity by =
entering code (One Time Code) sent over registered email or phone number =
using some mechanism like SMS or email gateway.
> One successful then only user  is allowed to access portal feature.
>=20
> This is required as part of Multi Factor Authentication.
>=20
> Thanks
> Dnyaneshwar
>=20
> -----Original Message-----
> From: DavidSeanTaylor [mailto:[email protected]]
> Sent: Tuesday, December 05, 2017 1:15 AM
> To: Jetspeed Developers List <[email protected]>
> Subject: Re: Jetspeed portal - MFA implementation
>=20
> I have not tried this, but I suggest that to support a One Time =
Password feature, Step 2 would have to additionally do something like:
>=20
> pwc.setExpirationDate();
> pwc.setExpired();
>=20
>> On Dec 4, 2017, at 7:16 AM, Dnyaneshwar Dabhade =
<[email protected]> wrote:
>>=20
>> Team,
>> Is there any Portlet or feature available with Jetspeed portal. I am =
looking to see if we can send OTP and use user's email id for 2 step =
authentication.
>>=20
>> Thanks
>> Dnyaneshwar
>>=20
>> -----Original Message-----
>> From: DavidSeanTaylor [mailto:[email protected] =
<mailto:[email protected]>]
>> Sent: Friday, December 01, 2017 9:51 PM
>> To: Jetspeed Developers List <[email protected] =
<mailto:[email protected]>>
>> Subject: Re: Jetspeed portal - MFA implementation
>>=20
>> The MFA Portlet is documented here:
>>=20
>> https://portals.apache.org/jetspeed-2/applications/mfa.html =
<https://portals.apache.org/jetspeed-2/applications/mfa.html> =
<https://portals.apache.org/jetspeed-2/applications/mfa.html =
<https://portals.apache.org/jetspeed-2/applications/mfa.html>>
>>=20
>> there is one portlet, MFALogin, included in the j2-admin app
>>=20
>>> On Dec 1, 2017, at 5:10 AM, Dnyaneshwar Dabhade =
<[email protected]> wrote:
>>>=20
>>> Hello Team,
>>>=20
>>> I am trying to implement and enable Multi Factor Authentication in =
our Jetspeed Portal. I see some folders in j2-admin related to MFA.
>>> Let us know if anyone have experience of implementing it. We are =
using the Jetspeed version 2.3.0.
>>> Your help is really appreciated.
>>>=20
>>> Thanks
>>> Dnyaneshwar
>>>=20
>>> CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY =
ATTACHMENTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN =
CONFIDENTIAL AND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED =
FROM DISCLOSURE. IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE =
OR THEIR AGENT, OR IF THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, =
PLEASE IMMEDIATELY ALERT THE SENDER BY REPLY EMAIL AND THEN DELETE THIS =
MESSAGE AND ANY ATTACHMENTS. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU =
ARE HEREBY NOTIFIED THAT ANY USE, DISSEMINATION, COPYING, OR STORAGE OF =
THIS MESSAGE OR ITS ATTACHMENTS IS STRICTLY PROHIBITED.
>>=20
>> CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY =
ATTACHMENTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN =
CONFIDENTIAL AND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED =
FROM DISCLOSURE. IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE =
OR THEIR AGENT, OR IF THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, =
PLEASE IMMEDIATELY ALERT THE SENDER BY REPLY EMAIL AND THEN DELETE THIS =
MESSAGE AND ANY ATTACHMENTS. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU =
ARE HEREBY NOTIFIED THAT ANY USE, DISSEMINATION, COPYING, OR STORAGE OF =
THIS MESSAGE OR ITS ATTACHMENTS IS STRICTLY PROHIBITED.
>>=20
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected] =
<mailto:[email protected]>
>> For additional commands, e-mail: [email protected] =
<mailto:[email protected]>
> CONFIDENTIALITY NOTICE: THE CONTENTS OF THIS EMAIL MESSAGE AND ANY =
ATTACHMENTS ARE INTENDED SOLELY FOR THE ADDRESSEE(S) AND MAY CONTAIN =
CONFIDENTIAL AND/OR PRIVILEGED INFORMATION AND MAY BE LEGALLY PROTECTED =
FROM DISCLOSURE. IF YOU ARE NOT THE INTENDED RECIPIENT OF THIS MESSAGE =
OR THEIR AGENT, OR IF THIS MESSAGE HAS BEEN ADDRESSED TO YOU IN ERROR, =
PLEASE IMMEDIATELY ALERT THE SENDER BY REPLY EMAIL AND THEN DELETE THIS =
MESSAGE AND ANY ATTACHMENTS. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU =
ARE HEREBY NOTIFIED THAT ANY USE, DISSEMINATION, COPYING, OR STORAGE OF =
THIS MESSAGE OR ITS ATTACHMENTS IS STRICTLY PROHIBITED.
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]


--Apple-Mail=_AF1DF46D-CC1C-4E01-A998-309EEB3F0082--