{"id":393193,"date":"2024-06-29T10:52:13","date_gmt":"2024-06-29T10:52:13","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=393193"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=393193","title":{"rendered":"Easy Two Factor Authentication (2FA) with Microsoft Authenticator (2)<\/span>"},"content":{"rendered":"
<\/div>\n
\n
\n
\n
\n

Some time ago we discussed<\/a> how to easy and fast setup 2FA using Google Authenitcator API. <\/p>\n

In this article we learn how to configure 2FA using Microsoft Authenticator:<\/p>\n

    \n
  1. \n

    Again, we download Microsoft Authenticator app from App Store or Google Play:<\/p>\n<\/li>\n<\/ol>\n

    <\/figure>\n
      \n
    1. \n

      Now we have Microsoft Authenticator app installed. Again, our next step would be to generate \u201csecret\u201d information and assign it to our account id. Don’t forget to subscribe to the API.<\/p>\n<\/li>\n<\/ol>\n

      This time we will be using \/new_v2\/ endpoint instead of \/new\/. The difference is that \/new_v2\/ returns only secret key without any additional comments. So far, create a \/new_v2\/ request in Postman and provide url and X-Rapidapi-Key, again no additional parameters needed (see details here\u00a0https:\/\/rapidapi.com\/chdan\/api\/otp-authenticator<\/a>). <\/p>\n

      After successful execution of the \/new_v2\/ endpoint you\u2019ll see your new secret value:<\/p>\n

      <\/figure>\n
        \n
      1. \n

        Save this secret value, add \u201caccount\u201d and \u201cissuer\u201d into our next \/enroll\/ endpoint. After successful execution of \/enroll\/ service you will have url link generated, so that your users could add this info to Microsoft Authenticator app:<\/p>\n<\/li>\n<\/ol>\n

        <\/figure>\n
          \n
        1. \n

          Now let\u2019s open this url and scan the QR code:<\/p>\n<\/li>\n<\/ol>\n

          <\/figure>\n

          Use \u201cScan a QR code\u201d button in Microsoft Authenticator (first push \u201c+\u201d button):<\/p>\n

          <\/figure>\n
            \n
          1. \n

            Done! After we synced Microsoft Authenticator app with your server\u2019s secret, Microsoft Authenticator starts generating time-based one-time passwords (TOTP):<\/p>\n<\/li>\n<\/ol>\n

            <\/figure>\n
              \n
            1. \n

              Now we can validate one-time passwords (TOTP) on our end using \/validate\/ service:<\/p>\n<\/li>\n<\/ol>\n

              <\/figure>\n

              \u201cTrue\u201d value indicates a correct entry. After 60 seconds the same request would return \u201cFalse\u201d value.<\/p>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n

              <\/div>\n


              \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 https:\/\/habr.com\/ru\/articles\/662646\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

              <\/div>\n
              \n
              \n
              \n
              \n

              Some time ago we discussed<\/a> how to easy and fast setup 2FA using Google Authenitcator API. <\/p>\n

              In this article we learn how to configure 2FA using Microsoft Authenticator:<\/p>\n

                \n
              1. \n

                Again, we download Microsoft Authenticator app from App Store or Google Play:<\/p>\n<\/li>\n<\/ol>\n

                <\/figure>\n
                  \n
                1. \n

                  Now we have Microsoft Authenticator app installed. Again, our next step would be to generate \u201csecret\u201d information and assign it to our account id. Don’t forget to subscribe to the API.<\/p>\n<\/li>\n<\/ol>\n

                  This time we will be using \/new_v2\/ endpoint instead of \/new\/. The difference is that \/new_v2\/ returns only secret key without any additional comments. So far, create a \/new_v2\/ request in Postman and provide url and X-Rapidapi-Key, again no additional parameters needed (see details here\u00a0https:\/\/rapidapi.com\/chdan\/api\/otp-authenticator<\/a>). <\/p>\n

                  After successful execution of the \/new_v2\/ endpoint you\u2019ll see your new secret value:<\/p>\n

                  <\/figure>\n
                    \n
                  1. \n

                    Save this secret value, add \u201caccount\u201d and \u201cissuer\u201d into our next \/enroll\/ endpoint. After successful execution of \/enroll\/ service you will have url link generated, so that your users could add this info to Microsoft Authenticator app:<\/p>\n<\/li>\n<\/ol>\n

                    <\/figure>\n
                      \n
                    1. \n

                      Now let\u2019s open this url and scan the QR code:<\/p>\n<\/li>\n<\/ol>\n

                      <\/figure>\n

                      Use \u201cScan a QR code\u201d button in Microsoft Authenticator (first push \u201c+\u201d button):<\/p>\n

                      <\/figure>\n
                        \n
                      1. \n

                        Done! After we synced Microsoft Authenticator app with your server\u2019s secret, Microsoft Authenticator starts generating time-based one-time passwords (TOTP):<\/p>\n<\/li>\n<\/ol>\n

                        <\/figure>\n
                          \n
                        1. \n

                          Now we can validate one-time passwords (TOTP) on our end using \/validate\/ service:<\/p>\n<\/li>\n<\/ol>\n

                          <\/figure>\n

                          \u201cTrue\u201d value indicates a correct entry. After 60 seconds the same request would return \u201cFalse\u201d value.<\/p>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n

                          <\/div>\n


                          \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 https:\/\/habr.com\/ru\/articles\/662646\/<\/a>
                          <\/br><\/br><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-393193","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/393193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=393193"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/393193\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=393193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=393193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=393193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}