Two Factor Authentication

by
Odoo 9
v 13.0 Third Party 950
Download for v 13.0 Deploy on Odoo.sh
Availability
Odoo Online
Odoo.sh
On Premise
Lines of code 335
Technical Name two_factor_otp_auth
LicenseLGPL-3
Websitehttps://ventor.tech
Versions 13.0 12.0
You bought this module and need support? Click here!
Availability
Odoo Online
Odoo.sh
On Premise
Lines of code 335
Technical Name two_factor_otp_auth
LicenseLGPL-3
Websitehttps://ventor.tech
Versions 13.0 12.0

TO AVOID ANY ISSUES, PLEASE, USE ALWAYS LATEST VERSION FROM OUR GITHUB REPOSITORY - https://github.com/ventor-tech/merp/tree/13.0

Two-factor authentification

The fact of having sensitive data on the web, and only protected by a single password is not acceptable from a data security point of view. The risks are well known, loss of reputation, fines, legal action, partial or total loss of business, cost of recovery.

The module functionality You will be able to switch on the 2FA for every user


Then while logging they will be requested for an additional key

The key is generated by the Google Authenticator mobile app. While the first login you need to scan a QR code using this app


While the first login you need to scan a QR code using this app

And the app shows you the key you need to insert into a related field

When you log in again the scanning is not required. The app resets the key about every 30 second and generates a new one

ventor.tech

Please log in to comment on this module

  • The author can leave a single reply to each comment.
  • This section is meant to ask simple questions or leave a rating. Every report of a problem experienced while using the module should be addressed to the author directly (refer to the following point).
  • If you want to start a discussion with the author, please use the developer contact information. They can usually be found in the description.
Please choose a rating from 1 to 5 for this module.
by
Veronika Sazonova
on 4/5/24, 6:24 AM


by
Alexandra Tihanovich
on 3/19/24, 12:04 PM


Good and essential app for a secure data system
by
ARNAU BIRBA
on 12/9/21, 12:01 PM

Nice Job! Easy implementation. I have complemented with the Inactive Sessions Timeout module to force the closure of inactive user's sessions.

Re: Good and essential app for a secure data system
by
Oleg Kuryan
on 12/9/21, 12:07 PM Author

Thanks for the review =)

hello
by
Yulian Andres Diaz Garcia
on 8/27/21, 12:02 AM

Hello I have been trying to activate the operation of the module but when I am going to activate 2auth in the user I get this error Only users with 'Mass Change 2FA Configuration for Users' rights can do this operation!

Re: hello
by
Oleg Kuryan
on 8/27/21, 3:01 AM Author

Yulian,

you need to go to Settings-Users. Find your user you a logged in with and set him access right “Mass Change 2FA Configuration for Users”.

Note that this is technical access right . So most likely will be visible only when activating debug mode (specified in Odoo documentation )

RFI
by
LabMate
on 5/11/20, 10:48 AM

Good day, Our client is looking for a third-party App for 2FA that will perform the below: 1. A user logs into Odoo 2. Ideally there would be a wait screen or a "waiting room" displayed for the user attempting to log in. 3. A message is sent to the administrator (A single person identified within the organisation) asking if access to Odoo is granted or denied 4. The administrator then grants or denies access. 5. The user is taken to Odoo if access is granted. 6. The user receives and access denied message if access is denied. Is this something this App can perform? If not, do you have other apps that could perform this function? Thank you. Gareth.

Re: RFI
by
Oleg Kuryan
on 6/27/20, 3:20 AM Author

Gareth, This app do not perform requirements above. Also there are no app I know about that will do requested above functionality, so looks like it is custom development. If you want to discuss it further, please, contact us at email address hello@ventor.tech or contact for available here https://ventor.tech/contact-us/ Also I see you have put 1-star rating - have you used module and you didn't like it so much? =)

Good module but for the moment forbid to use the Odoo Enterprise mobile app
by
Jean Respen
on 4/30/20, 8:38 AM

Hi, Your module is working good (I am using it on Odoo 13.0 under Odoo.sh). Problem is : when trying to log in on the mobile app provided by Odoo, it always returns that the password is wrong. If we deactivate 2FA for this user, it logs in. Can you provide a fix? Best. Jean

Re: Good module but for the moment forbid to use the Odoo Enterprise mobile app
by
Oleg Kuryan
on 6/27/20, 5:36 AM Author

Jean, Thank you for your report! I was able to reproduce error. Looks like Odoo mobile app using using absolutely different method of authentication. I have logged issue after some analysis regarding this https://github.com/ventor-tech/merp/issues/96 You can subscribe to the issue to see if there will be updates.

odoo.sh install
by
chris@ausbuygroup.com
on 4/14/20, 3:48 AM

Hi Guys, when installing to odoo.sh how do you install its dependencies qrcode and pyotp

Re: odoo.sh install
by
Oleg Kuryan
on 4/14/20, 4:13 AM Author

Hi Chris, Please, check documentation on odoo.sh https://www.odoo.com/documentation/user/13.0/odoo_sh/getting_started/first_module.html#use-an-external-python-library Hope that helps

Authy + Odoo 13
by
GamerStore
on 3/18/20, 11:40 AM

Hello. Is it compatible with Authy and Odoo 13? Thanks.

Re: Authy + Odoo 13
by
Oleg Kuryan
on 3/18/20, 12:27 PM Author

Hello, yes, it is compatible with Odoo 13 and Authy. I just tested it myself.

EXCELLENT INFORMATION
by
Eduardo Maldonado
on 12/27/23, 3:00 PM

I have successfully enabled 2fa for all my users in odoo v15, the problem I have detected is that several users have disabled 2fa for their own accounts. Is there a permission or setting that restricts or disallows the action to the end user?


Re: EXCELLENT INFORMATION
by
Oleg Kuryan
on 12/28/23, 5:00 AM Author

Hello Eduardo,

For Odoo 15 2FA is not concerning our module as starting from Odoo 14 Odoo has standard 2FA. If you have specific question and need specific functionality you can address to support@ventor.tech

by
graham nori
on 11/29/22, 9:05 PM

Hi 
I am very interested in 2FA for odoo 13. 

It seems at the moment that everytime a user logs into the system (assuming they have been logged out) that they have to do the 2FA again to log back in

Is it possible to have the 2FA authenticate the device and allow that device to be remembered for a period of time, say 30 days, so that 2FA does not have to be used again in that time

it is a porblem to have to use the authenticator everytime for login

Thanks


Re:
by
Oleg Kuryan
on 11/30/22, 3:22 AM Author

Hello Graham,

That is possible to develop of course, but our module do not support that. But you can extend it with needed functionality as code is available publically  https://github.com/ventor-tech/merp/tree/13.0/two_factor_otp_auth

by
Andy
on 5/17/21, 2:35 AM

Do you have a plan on supporting Odoo 11?  Thank you!

Re:
by
Oleg Kuryan
on 5/17/21, 5:59 AM Author

Hi,

No plans for Odoo 11. We try to follow Odoo strategy of supporting versions (support last 3 active versions)

by
kevin
on 5/13/21, 6:13 AM

thanks Oleg, I set the web.base.url in the system parameters with right domain name like: https://staging.testcompany.com, but the problem still same, every time I login, it still pop the QR code , after scan with Google Authenticator, and put the code, it will show verification code wrong.

Re:
by
Oleg Kuryan
on 5/14/21, 1:03 AM Author

Hi Kevin,

2 more thing to check

1) if your instance is behind reverse proxy in your odoo.conf set proxy=True

2) if that will not help than look at logs and debug directly on server the issue 


by
kevin
on 5/11/21, 10:24 PM

Dear author, I have a problem when I use this APP, when I tested in my local machine, the APP works without problem, but when I tested in my odoo 12 in AWS EC2 instance, after scan the QR code, click the next step and input the code from Google authenticator, it shows wrong code error. after check odoo user record, the QR code is not updated to that user's record in odoo, and everytime the user login, it asked to scan the QR code again. My AWS EC2 instance using domain name to access.
Could you please advise why it works in my local machine, but not in AWS?

Re:
by
Oleg Kuryan
on 5/12/21, 2:04 AM Author

Most likely you need to check that your "web.base.url" is properly set to your domain

1) Enter debug mode in Odoo

2) Go to Settings-Technical-System Parameters and check that above URL is proper one with domain. 

If you see that it points to localhost then most likely you have configured Odoo incorrectly. There are some special configuration needed for Odoo to work properly in reverse proxy environment. Check with your local partner or this article https://ventor.tech/odoo/odoo-installation-script/

by
martin.borg@aviense.eu
on 12/8/20, 10:42 AM

Hi Oleg - is it only Internal Users that will be required to authenticate using 2FA, or will portal users also be required to do so?

Thanks in advance

Re:
by
Oleg Kuryan
on 12/8/20, 11:12 AM Author

Hi Martin,

It is only for internal users. And you can even for internal users enable or disable this feature.

Odoo 14
by
Harri Matero
on 12/3/20, 6:05 AM

Hi

Is there Odoo-14 version coming?


-Harri


Re: Odoo 14
by
Oleg Kuryan
on 12/3/20, 7:40 AM Author

Odoo 14 has standard 2FA. It is not required to develop it already.

GitHub repository
by
ggeorgiev
on 10/2/20, 4:22 AM

Hi, I have install pyotp and the module. However, I cannot click on "Enable two-factor authentication", as there is no such button in the Users management screen. Can you please provide the link to the GitHub repository? I have installed version two_factor_otp_auth-13.0.1.0.0 from the odoo repository.

Re: GitHub repository
by
Oleg Kuryan
on 10/3/20, 2:55 AM Author

Hi,

This is link to github repository 

https://github.com/ventor-tech/merp/tree/13.0/two_factor_otp_auth

Maybe try to add access right https://github.com/ventor-tech/merp/blob/13.0/two_factor_otp_auth/security/two_factor_otp_auth.xml#L5

by
suneel
on 9/17/20, 10:14 AM

Sir,

I am trying install "pyotp" not "pyopt"


 

Re:
by
Oleg Kuryan
on 9/17/20, 11:06 AM Author

Ah, yes, first link in google https://pypi.org/project/pyotp/#description

by
suneel
on 9/17/20, 9:24 AM

Hi Oleg,

Thank you for the response. I have already placed the module in following path: 

Program Files (x86)\Odoo 13.0\server\odoo\addons and could see the module in odoo apps. but when i click on "install", i got above error. 

I know module is searching for the python library "PYOTP" but i am unable to install the same.

Hope you can help me in this.


Regards,

Suneel 

Re:
by
Oleg Kuryan
on 9/17/20, 10:08 AM Author

This is official documentation on how to install this python library http://www.pyopt.org/install.html#requirements

by
suneel
on 9/17/20, 3:05 AM

Hi,

I am trying to install the application but failed, as i am getting error " Unable to install module "two_factor_otp_auth" because an external dependency is not met: Python library not installed: pyotp". I am not tech person. can any one help me getting this external dependency installed??

Suneel

Re:
by
Oleg Kuryan
on 9/17/20, 8:32 AM Author

Hi Suneel,

Unfortunately without being tech person it is not possible to install module. Odoo is in general technical framework designed by developers and for developers. Where you are trying to install module?

Authy + Odoo 13
by
GamerStore
on 3/18/20, 11:31 AM

Hello. Is it compatible with Authy and Odoo 13? Thanks.

Authy + Odoo 13
by
GamerStore
on 3/18/20, 11:26 AM

Hello. Is it compatible with Authy and Odoo 13? Thanks.