https://github.com/nicogis/twofa-utility-soe

PoC: using 2FA with operations SOE
https://github.com/nicogis/twofa-utility-soe

2factor operations-soe qrcode soe twofa

Last synced: about 2 months ago
JSON representation

PoC: using 2FA with operations SOE

• Host: GitHub
• URL: https://github.com/nicogis/twofa-utility-soe
• Owner: nicogis
• Created: 2017-03-10T20:13:26.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2023-02-21T15:21:16.000Z (almost 2 years ago)
• Last Synced: 2024-01-27T07:39:27.963Z (about 1 year ago)
• Topics: 2factor, operations-soe, qrcode, soe, twofa
• Language: C#
• Size: 1.68 MB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# 2FA using operations SOE

## Description

This is a Proof of Concept (PoC) using 2FA (two factor authentication) in a operation of SOE.

This SOE has two operations:

- **twoFA**: authorizes the current user to 2FA

- **addOperation**: an add operation (value1 + value2)

 

You need secure ArcGIS Server service

In this sample I secure 'SampleWorldCities' service with user 'Utente1'.

*Login using a user* 

  

![Login Rest](Images/LoginRest.PNG)

*Click on TwoFAUtility SOE*

![Two F A Utility](Images/TwoFAUtility.PNG)

*Click on TwoFA operation*

![Two F A Operation](Images/TwoFAOperation.PNG)

Set **issuerID** and **format** image so you see qrCode for [Google Authenticator](https://support.google.com/ACCOUNTS/ANSWER/1066447) (Android, iOS) or [Authenticator](http://www.windowsphone.com/EN-US/STORE/APP/AUTHENTICATOR/E7994DBC-2336-4950-91BA-CA22D653759B) (Windows Phone, iOS, Android). 

The issuerID will appear on the user's Google/Microsoft Authenticator app. It should be the name of your app/system so the user can easily identify it.

 

**Reset** parameter is optional (default = false). If you set true and the current user has yet set 2FA the secret key is regenerated.

![Two F A Operation Set Parameters](Images/TwoFAOperationSetParameters.PNG)

*Click on twoFA(Get)*

![Two F A Operation Q R Code](Images/TwoFAOperationQRCode.PNG)

Use Google Authenticator to read qrcode

![G A](Images/GA.PNG)

or Authenticator of Microsoft to read qrcode

![W A](Images/WA.PNG)

Scan QR code with photo camera

![Scan Q R Code](Images/ScanQRCode.PNG)

If I give the code from Authenticator in operation 'addOperation', SOE returns result of operation 

![Code](Images/Code.PNG)

otherwise SOE returns error

![Code K O](Images/CodeKO.PNG)