Document management 2 factor security

[nettemor]

I want to check if its possible to achieve the following workflow with joomla and what kind of extensions i need. Also required a 2FA security (customers need):

The workflow is as follows:

1. People in the administration creates a customer login and disc space for this customer. Then they upload project documents, images ++ for the customer. This area are not to be visible or accessable from frontend without beeing logged in with as the actual customer.

2. When project manager is visiting the customer on site, they can login to the current customer area and show the customer project plans, budgets (excel), images and whatever that is uploaded for the actual customer.


As i see it, i need a login and project area for each customer. The documents that are uploaded for the customer must be very easy to access and displayed to look at on an ipad/phone.

Anyone knows if there is a good extension for this usage? The main key is a good workflow and also 2FA is required to log in.

[Webdongle]

Joomla has 2fa built in.
For individual acl try something like https://extensions.joomla.org/extension ... y-builder/
Otherwise acl by user group something like https://extensions.joomla.org/extension/phoca-download/

[nettemor]

Hi Webdongle,
thank you for getting back to me, i appreciate it.

You say joomla has 2fa built in. If i want the possibility to login and then get a code on my phone to be able to access the info, - how do i implement that?
(never done this...)

[Webdongle]

It's done on your smart phone with the Google Authenticator app https://docs.joomla.org/J3.x:Two_Factor_Authentication

[Per Yngve Berg]

Note: Joomla does no longer have 2FA. It's replaced with MFA (Multi Factor Authentication). You can login with TOTP, SMS, Email and Passkeys is also supported.

[Webdongle]

My bad.
https://magazine.joomla.org/all-issues/ ... cation-mfa

[nettemor]

Thank you Per Yngve and Webdongle,

As i have never used these options in my joomla solutions i know little about it.
For my customer it is important to use a very good safety for the project documents.

What do you think of MFA, and what is your experience with MFA vs 2Fa?
Will this be safe, easy to manage or are there any issues i have to be aware of?
Also is this easy for the users to access/login to see the project documents ?

[Webdongle]

Never used it for Joomla but should be the same (secure, easy to use) as as others that use Google authentication.
It is used to login to Joomla account itself not individual sections of Joomla. Joomla's ACL controls what a user (in a user group) has access to.