Apache Allura™

Support for enabling Two Factor Authentication(2FA) for users is now available in Allura's master branch.

Users can enable 2FA by visiting their account preferences page and set it up.

After clicking on the setup page, users will be asked for their password.

Users then install the Google Authenticator App for their smartphones. The links to install it can also be emailed to their accounts so that the link can be accessed from their phone.

Users then scan the barcode and enter the time based six digit one time password generated by the mobile app in Allura.

After successfully setting up 2FA, users will be provided with recovery codes which can be used incase users get locked out of their account.

An email is also sent to the user.

Users can also modify their settings and view the recovery codes as well as disable 2FA from their account preferences.