https://github.com/emersonmello/mfap-installation-guide
This repository presents a guide to install a comprehensive and open source solution to offer multi-factor authentication for Shibboleth Identity Providers (version 3.3.1).
https://github.com/emersonmello/mfap-installation-guide
fido2 idp mfa multifactor-authentication otp saml shibboleth shibboleth-identity-provider shibboleth-idp
Last synced: 10 months ago
JSON representation
This repository presents a guide to install a comprehensive and open source solution to offer multi-factor authentication for Shibboleth Identity Providers (version 3.3.1).
- Host: GitHub
- URL: https://github.com/emersonmello/mfap-installation-guide
- Owner: emersonmello
- License: apache-2.0
- Created: 2021-01-28T14:23:36.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2021-01-28T14:26:52.000Z (over 5 years ago)
- Last Synced: 2025-06-02T00:25:18.692Z (about 1 year ago)
- Topics: fido2, idp, mfa, multifactor-authentication, otp, saml, shibboleth, shibboleth-identity-provider, shibboleth-idp
- Language: Python
- Homepage:
- Size: 4.61 MB
- Stars: 1
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Multi-factor installation guide
This repository presents a guide to install a comprehensive and open-source solution (available at https://git.rnp.br/GT-AMPTo/MfaProvider) to offer multi-factor authentication for Shibboleth Identity Providers (version 3.3.1).
Based on the [Multi-factor Authentication Profile standard (REFEDS MFA Profile)](https://refeds.org/profile/mfa), our solution [(MFaProvider)](https://git.rnp.br/GT-AMPTo/MfaProvider) provides three extra second factors:
- One-Time Password - TOTP standard
- you can use Google Authenticator
- FIDO2 (WebAuthN)
- you can use physical tokens such as Yubikey
- Phone Prompt - Mobile App developed by us
- [Android source code](https://git.rnp.br/GT-AMPTo/App2Ampto)
- [iOS source code](https://git.rnp.br/GT-AMPTo/amptoios)
## Manuals in English
- [Main multi-factor installation guide (IdP and MfaProvider)](doc/en/Readme.md)
- [Log management manual](doc/en/Logs.md)
- [Removing the second factor from a user](doc/en/Factor-Removal-Implementation.md)
- [How to setup a local development environment](doc/en/setup-local-dev.md)
- [How to implement a new factor according to the current architecture](doc/en/New-Factor.md)
- [How to configure Service Provider to request that Identity Providers perform MFA](doc/en/sp-mfa.md)
## Manuais em Português
- [Principal roteiro de instalação da solução multi-fator (IdP e MfaProvider)](doc/pt_BR/Readme.md)
- [Como verificar os *logs* gerados pela solução](doc/pt_BR/Logs.md)
- [Como remover o segundo fator associado a conta de um usuário](doc/pt_BR/Implementacao-remover-fator.md)
- [Como montar um ambiente local de desenvolvimento para o MFaP](doc/pt_BR/Ambiente-DEV-local-MFaP.md)
- [Como desenvolver o novo fator de autenticação](doc/pt_BR/Novo-fator.md)
- [Como configurar provedores de serviços (SP) para solicitar que os provedores de identidade (IdPs) realizem MFA](doc/pt_BR/sp-mfa.md)
## Organization of the GT-AMPTo's repositories
- **Multi-factor installation guide**
- https://git.rnp.br/GT-AMPTo/mfap-installation-guide
- Use this repository to perform the automated installation of the MFaP solution at the Identity Provider. The script will download codes from [MFaProvider](https://git.rnp.br/GT-AMPTo/MfaProvider) and [MfaProviderIdp](https://git.rnp.br/GT-AMPTo/mfadialogo) repositories
- **MFaProvider**
- https://git.rnp.br/GT-AMPTo/MfaProvider
- Application responsible for performing MFA authentication of users and which presents a dashboard for users to enable their authentication factors
- **MFaP library for the IdP**
- https://git.rnp.br/GT-AMPTo/mfadialogo
- Library to be invoked by the IdP's `AuthFlow`(in the `.xml` file) and that will allow to interact with the [MFaProvider](https://git.rnp.br/GT-AMPTo/MfaProvider)
- **Mobile applications specific for Phone Prompt**
- https://git.rnp.br/GT-AMPTo/App2Ampto - Android version
- https://git.rnp.br/GT-AMPTo/amptoios - iOS version
- Required if you want to use the Phone Prompt as a second authentication factor
## Publications
- Ribeiro de Mello, E., Silva Wangham, M., Bristot Loli, S. et al. **Multi-factor authentication for shibboleth identity providers**. J Internet Serv Appl 11, 8 (2020). https://doi.org/10.1186/s13174-020-00128-1. https://rdcu.be/cbzPJ
- MELLO, E. R.; WANGHAM, M. S. ; LOLI, S. B. ; SILVA, C. E. ; SILVA, G. C. **Autenticação multi-fator em provedores de identidade Shibboleth**. In: Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais (SBSeg), 2018, Natal. Anais do Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais (SBSeg). Porto Alegre: SBC, 2018. p. 85-98. [download](https://wordpress.sj.ifsc.edu.br/gtampto/wp-content/uploads/sites/21/2017/05/mello-gt-ampto-sbseg2018.pdf)
- SILVA, G. C. ; SILVA, C. E. ; MELLO, E. R. ; WANGHAM, M. S. ; LOLI, S. B. **Transposição da Autenticação Federada para uma Solução de Controle de Acesso Físico no contexto da Internet das Coisas**. In: Salão de Ferramentas do Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais (SBSeg), 2018, Natal. Anais Estendidos do Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais (SBSeg). Porto Alegre: SBC, 2018. p. 73-80. [download](https://wordpress.sj.ifsc.edu.br/gtampto/wp-content/uploads/sites/21/2017/05/gtampto-iot-sbseg2018.pdf)
- SILVA, G. C.; SILVA, C.E. **Uma Proposta de Arquitetura para Autorização Federada com Internet das Coisas**. In Workshop de Trabalhos de Iniciação Científica e de Graduação (WTICG) do Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais (SBSeg), 2017, Brasília.
## Authors
- [Emerson Ribeiro de Mello](https://github.com/emersonmello) - Federal Institute of Santa Catarina (IFSC)
- [Carlos Eduardo da Silva](https://www.researchgate.net/profile/Carlos_Da_Silva6) - Sheffield Hallam University
- [Michelle Silva Wangham](https://www.researchgate.net/profile/Michelle_Wangham) - Universidade do Vale do Itajaí (UNIVALI)
- [Samuel Bristot Loli](https://github.com/samuelbl) - Federal Institute of Santa Catarina (IFSC)
- [Shirlei Aparecida Chaves](https://github.com/shirlei) - Federal Institute of Santa Catarina (IFSC)
- [Gabriela Cavalcanti da Silva](https://github.com/gabicavalcante) - Federal University of Rio Grande do Norte
- Bruno Bristot Loli - CIASC
- [Felipe Cardoso](https://github.com/fpcardoso) - Federal Institute of Santa Catarina (IFSC)