Kolab with 2FA privacyidea

[Henning]

Hello Jochen,

that's a great hint - I guess you redirect the API endpoint to have
privacyidea deal with the request like described here:
https://privacyidea.readthedocs.io/en/v3.5.2/tokens/tokentypes/yubikey.html#redirect-api-url-to-privacyideas-ttype-yubikey?

Is there any general way to connect kolab/roundcube to privacyidea to
keep the token-management in IT-hands?

Best regards,

Henning

On 04.10.22 06:18, Jochen Kellner wrote:
>
> Hello Henniny,
>
> Henning <laclaro at mail.com> writes:
>
>> I wonder if anyone has integrated Kolab with managed 2FA at privacyIDEA
>> (privacyidea.org)? There is the possibility to do it with Keycloak, but
>> this seems too large for me. Has anyone in the community done it with
>> RADIUS or custom plugin?
>
> For some time I've use kolab_2fa - you have two options there: TOTP with
> app/keepass plugin or yubico token. For the latter I used a yubico token
> in my own privacyidea instance. For configuration see kolab_2fa_yubikey.
>
> What second factor do you use?
>
> Jochen
>