Starting with version 2.0.6, LemonLDAP::NG lets you configure multiple instances of second factor authentication modules, in a manner similar to the Combination module.
Only the following Second Factor modules are compatible with this feature:
Using this option, lets you give your users a wider range of possible second factors. They could decide between using their work email or home email. And as an administrator you may now plug in more than one Second Factor solution through REST or external commands.
You can find the configuration for this feature in General parameters » Second factors » Additional second factors
After adding your second factors, don’t forget to add overload parameters to them. You usually should at least give them different logos so that the user can tell the difference between two second factors of the same type.
See the parameters list page for a full list of parameters you may overload. Here are the most useful ones:
New in version 2.0.16.
Enabling registration for an additional second factor allows the user to register their own E-Mail address, SMS number, etc.
This is only compatible with the Mail, REST and External command modules. These modules will received the registered contact information through the destination variable, which you can use in ext2FSendCommand or rest2fInitArgs.
When using the “registration” option for additional second factors, all second factor types will use generic2fregister.tpl for registration and ext2fcheck.tpl. If you want to display different things (messages, forms, etc.) to the user for different second factor types, you can use the PREFIX variable in your templates.
For example, if you defined a homePhone and homeMail extra second factor and want to overload the prompt message, replace
<label for="generic">① <span trspan="genericRegisterPrompt">Enter your contact information</span></label>
by:
<label for="generic">① <span trspan="<TMPL_VAR NAME="PREFIX">Prompt">Enter your contact information</span></label>
And then set define homePhonePrompt and homeMailPrompt translation keys.
You can also test for a particular second factor type
<TMPL_IF NAME="PREFIX_homePhone">
Some info specific to the homePhone 2FA type
</TMPL_IF>