Availability |
Odoo Online
Odoo.sh
On Premise
|
Lines of code | 335 |
Technical Name |
two_factor_otp_auth |
License | LGPL-3 |
Website | https://ventor.tech |
Versions | 13.0 12.0 |
Availability |
Odoo Online
Odoo.sh
On Premise
|
Lines of code | 335 |
Technical Name |
two_factor_otp_auth |
License | LGPL-3 |
Website | https://ventor.tech |
Versions | 13.0 12.0 |
TO AVOID ANY ISSUES, PLEASE, USE ALWAYS LATEST VERSION FROM OUR GITHUB REPOSITORY - https://github.com/ventor-tech/merp/tree/13.0
Two-factor authentification
The fact of having sensitive data on the web, and only protected by a single password is not acceptable from a data security point of view. The risks are well known, loss of reputation, fines, legal action, partial or total loss of business, cost of recovery.
The module functionality You will be able to switch on the 2FA for every user
![](http://apps.odoocdn.com/apps/assets/13.0/two_factor_otp_auth/1.png?ab295f8)
Then while logging they will be requested for an additional key
![](http://apps.odoocdn.com/apps/assets/13.0/two_factor_otp_auth/2.png?ab295f8)
The key is generated by the Google Authenticator mobile app. While the first login you need to scan a QR code using this app
While the first login you need to scan a QR code using this app
![](http://apps.odoocdn.com/apps/assets/13.0/two_factor_otp_auth/3.png?ab295f8)
And the app shows you the key you need to insert into a related field
![](http://apps.odoocdn.com/apps/assets/13.0/two_factor_otp_auth/4.png?ab295f8)
When you log in again the scanning is not required. The app resets the key about every 30 second and generates a new one
![](http://apps.odoocdn.com/apps/assets/13.0/two_factor_otp_auth/bottom_icon.png?ab295f8)
ventor.tech
Please log in to comment on this module
Report comment
Any abuse of this reporting system will be penalizeddidn't work
Good and essential app for a secure data system
Nice Job! Easy implementation. I have complemented with the Inactive Sessions Timeout module to force the closure of inactive user's sessions.
Re: Good and essential app for a secure data system
Thanks for the review =)
hello
Hello I have been trying to activate the operation of the module but when I am going to activate 2auth in the user I get this error Only users with 'Mass Change 2FA Configuration for Users' rights can do this operation!
Re: hello
Yulian,
you need to go to Settings-Users. Find your user you a logged in with and set him access right “Mass Change 2FA Configuration for Users”.
Note that this is technical access right . So most likely will be visible only when activating debug mode (specified in Odoo documentation )
RFI
Good day, Our client is looking for a third-party App for 2FA that will perform the below: 1. A user logs into Odoo 2. Ideally there would be a wait screen or a "waiting room" displayed for the user attempting to log in. 3. A message is sent to the administrator (A single person identified within the organisation) asking if access to Odoo is granted or denied 4. The administrator then grants or denies access. 5. The user is taken to Odoo if access is granted. 6. The user receives and access denied message if access is denied. Is this something this App can perform? If not, do you have other apps that could perform this function? Thank you. Gareth.
Re: RFI
Gareth, This app do not perform requirements above. Also there are no app I know about that will do requested above functionality, so looks like it is custom development. If you want to discuss it further, please, contact us at email address hello@ventor.tech or contact for available here https://ventor.tech/contact-us/ Also I see you have put 1-star rating - have you used module and you didn't like it so much? =)
Good module but for the moment forbid to use the Odoo Enterprise mobile app
Hi, Your module is working good (I am using it on Odoo 13.0 under Odoo.sh). Problem is : when trying to log in on the mobile app provided by Odoo, it always returns that the password is wrong. If we deactivate 2FA for this user, it logs in. Can you provide a fix? Best. Jean
Re: Good module but for the moment forbid to use the Odoo Enterprise mobile app
Jean, Thank you for your report! I was able to reproduce error. Looks like Odoo mobile app using using absolutely different method of authentication. I have logged issue after some analysis regarding this https://github.com/ventor-tech/merp/issues/96 You can subscribe to the issue to see if there will be updates.
odoo.sh install
Hi Guys, when installing to odoo.sh how do you install its dependencies qrcode and pyotp
Re: odoo.sh install
Hi Chris, Please, check documentation on odoo.sh https://www.odoo.com/documentation/user/13.0/odoo_sh/getting_started/first_module.html#use-an-external-python-library Hope that helps
Authy + Odoo 13
Hello. Is it compatible with Authy and Odoo 13? Thanks.
Re: Authy + Odoo 13
Hello, yes, it is compatible with Odoo 13 and Authy. I just tested it myself.
EXCELLENT INFORMATION
I have successfully enabled 2fa for all my users in odoo v15, the problem I have detected is that several users have disabled 2fa for their own accounts. Is there a permission or setting that restricts or disallows the action to the end user?
Re: EXCELLENT INFORMATION
Hello Eduardo,
For Odoo 15 2FA is not concerning our module as starting from Odoo 14 Odoo has standard 2FA. If you have specific question and need specific functionality you can address to support@ventor.tech
Hi
I am very interested in 2FA for odoo 13.
It seems at the moment that everytime a user logs into the system (assuming they have been logged out) that they have to do the 2FA again to log back in
Is it possible to have the 2FA authenticate the device and allow that device to be remembered for a period of time, say 30 days, so that 2FA does not have to be used again in that time
it is a porblem to have to use the authenticator everytime for login
Thanks
Re:
Hello Graham,
That is possible to develop of course, but our module do not support that. But you can extend it with needed functionality as code is available publically https://github.com/ventor-tech/merp/tree/13.0/two_factor_otp_auth
Do you have a plan on supporting Odoo 11? Thank you!
Re:
Hi,
No plans for Odoo 11. We try to follow Odoo strategy of supporting versions (support last 3 active versions)
thanks Oleg, I set the web.base.url in the system parameters with right domain name like: https://staging.testcompany.com, but the problem still same, every time I login, it still pop the QR code , after scan with Google Authenticator, and put the code, it will show verification code wrong.
Re:
Hi Kevin,
2 more thing to check
1) if your instance is behind reverse proxy in your odoo.conf set proxy=True
2) if that will not help than look at logs and debug directly on server the issue
Dear author, I have a problem when I use this APP, when I tested in my local machine, the APP works without problem, but when I tested in my odoo 12 in AWS EC2 instance, after scan the QR code, click the next step and input the code from Google authenticator, it shows wrong code error. after check odoo user record, the QR code is not updated to that user's record in odoo, and everytime the user login, it asked to scan the QR code again. My AWS EC2 instance using domain name to access.
Could you please advise why it works in my local machine, but not in AWS?
Re:
Most likely you need to check that your "web.base.url" is properly set to your domain
1) Enter debug mode in Odoo
2) Go to Settings-Technical-System Parameters and check that above URL is proper one with domain.
If you see that it points to localhost then most likely you have configured Odoo incorrectly. There are some special configuration needed for Odoo to work properly in reverse proxy environment. Check with your local partner or this article https://ventor.tech/odoo/odoo-installation-script/
Hi Oleg - is it only Internal Users that will be required to authenticate using 2FA, or will portal users also be required to do so?
Thanks in advance
Re:
Hi Martin,
It is only for internal users. And you can even for internal users enable or disable this feature.
Odoo 14
Hi
Is there Odoo-14 version coming?
-Harri
Re: Odoo 14
Odoo 14 has standard 2FA. It is not required to develop it already.
GitHub repository
Hi, I have install pyotp and the module. However, I cannot click on "Enable two-factor authentication", as there is no such button in the Users management screen. Can you please provide the link to the GitHub repository? I have installed version two_factor_otp_auth-13.0.1.0.0 from the odoo repository.
Re: GitHub repository
Hi,
This is link to github repository
https://github.com/ventor-tech/merp/tree/13.0/two_factor_otp_auth
Maybe try to add access right https://github.com/ventor-tech/merp/blob/13.0/two_factor_otp_auth/security/two_factor_otp_auth.xml#L5
Sir,
I am trying install "pyotp" not "pyopt"
Re:
Ah, yes, first link in google https://pypi.org/project/pyotp/#description
Hi Oleg,
Thank you for the response. I have already placed the module in following path:
Program Files (x86)\Odoo 13.0\server\odoo\addons and could see the module in odoo apps. but when i click on "install", i got above error.
I know module is searching for the python library "PYOTP" but i am unable to install the same.
Hope you can help me in this.
Regards,
Suneel
Re:
This is official documentation on how to install this python library http://www.pyopt.org/install.html#requirements
Hi,
I am trying to install the application but failed, as i am getting error " Unable to install module "two_factor_otp_auth" because an external dependency is not met: Python library not installed: pyotp". I am not tech person. can any one help me getting this external dependency installed??
Suneel
Re:
Hi Suneel,
Unfortunately without being tech person it is not possible to install module. Odoo is in general technical framework designed by developers and for developers. Where you are trying to install module?
Authy + Odoo 13
Hello. Is it compatible with Authy and Odoo 13? Thanks.
Authy + Odoo 13
Hello. Is it compatible with Authy and Odoo 13? Thanks.