Useful Drupal modules
Click on the module name for notes, comments, patches.
Recommendations (for and against) are my personal opinion only and may be out of date. Feel free to email with corrections/suggestions.
|Name||D8||Personally Tested||Last Updated|
|Two Factor Authentication (tfa)||✔||✔||2018-09-17|
install tfa and ga_login (TFA is just a framework, it doesn't come with it's own login plugins.)
Use this patch I wrote - it adds display of validation skip times and an admin reset button for users who are got locked out.
My installation instructions:
Next you need to generate an encryption profile.
Set key provider to File rather than Configuration, this means the key won't end up in your version control.
Tick the 'strip trailing line breaks' box to avoid the "The selected key size does not match the actual size of the key." error
Key path should be relative to Drupal so the config will work on multiple sites
Remember to save the key somewhere in your password manager, or your ansible variables, in case you lose the files later.
In the TFA settings (/admin/config/people/tfa) you probably want to increase the number of times a user can skip validation.
Note that TFA has a separate 'Tfa user login' block (replacing the ordinary 'User login')