How to 2FA-enable Open Source Applications
summary
Shows which free 2FA options actually work and how to wire them into apps: FIDO/U2F and WebAuthn for near-zero failure rate, OTP and SMS (Twilio) with a measured 3% failure rate, mobile push (Superglue) and Duo, plus federation via OpenID Connect/SAML. Demonstrates a built Casa user portal for enroll/delete of credentials and a glue gateway reverse proxy that enforces step‑up auth. Includes deployment notes, phishing‑resistant creds, and a live demo that successfully authenticates.
AI-written summary · about
chapters (33)
- 0:00Start
- 2:46Two-Factor Authentication
- 5:00Multi Step Authentication Workflow
- 5:12First Authentication
- 5:48Step Three
- 7:40Quick Notes about Passwords
- 8:16Threat Model
- 10:09Biometric Authentication
- 15:26Mobile Push
- 17:30Sms Otp
- 18:01The Sim Swap Attack
- 18:40Compromised Password
- 27:20Overview Where Does Two-Factor Authentication Stand Today
- 29:03How Do Organizations Actually Roll Out Two Factor Authentication
- 30:00The Deployability Challenge
- 30:19Recovery
- 38:48Sam'l Assertion
- 41:07Open Id Provider
- 42:17Authentication
- 45:00User Agent
- 47:09Typical Flow
- 47:27Resource Server
- 53:19Approaches for Single Sign-On
- 56:59How to to Fa Enable Open Source Applications
- 1:02:53Federated Identity Presents a Problem with Two-Factor Authentication
- 1:05:42Recommendations for Native Applications
- 1:09:47Interception Scripts
- 1:11:13Authentication Scripts
- 1:15:58Live Demo
- 1:18:49Community Support
- 1:20:10Manage My Superglue Devices
- 1:25:05Quick Branding
- 1:25:53Installing Glue
