Two factor authentication

Discuss with the community any ideas you'd love to see in future DiskStations and DSM updates! We do our best to monitor and forward all of them, but we recommend to also use this form as our team will systematically see your suggestion:
https://www.synology.com/en-global/form ... y/feedback
Forum rules
We do our best to monitor and forward your ideas to our team, but due to the large amount, we may not see every single one and recommend to also use this form as our team will systematically see your suggestion:
https://www.synology.com/en-global/form ... y/feedback

Add two factor authentication to DSM?

Yes.
31
86%
Yes (with some related request).
2
6%
No.
3
8%
 
Total votes: 36
mclotet
I'm New!
I'm New!
Posts: 5
Joined: Thu May 03, 2012 6:25 pm

Two factor authentication

Postby mclotet » Wed Aug 08, 2012 8:32 am

Hi!

I think that it would be great if Synology would provide the option for two-factor authentification.

Something similar to what Gmail provides, a password + code. The codes could be generated using an app (like Google Authenticator).

I guess this would not be extremely complicated to implement and it would significantly increase the level of security of the system.

What do you think?
Last edited by mclotet on Wed Aug 08, 2012 4:19 pm, edited 1 time in total.
adgud
Novice
Novice
Posts: 57
Joined: Thu Sep 09, 2010 9:24 pm

Re: Two factor authentication

Postby adgud » Wed Aug 08, 2012 3:17 pm

I thought of this today and was about to post a topic and I saw yours.

Yes, I also think this is much needed feature, as exposing the DSM interface to the internet is risky.
I understand that it probably would be only Android/iOS application, as sending text messages is an additional cost, however my guess is it is completely doable to implement such feature. Such security measure is extremely important since the data kept on Synology products is usually important and private.
http://forum.synology.com/enu/viewtopic.php?f=10&t=38457 - Syno Download Redirector - extension for Opera browser
mclotet
I'm New!
I'm New!
Posts: 5
Joined: Thu May 03, 2012 6:25 pm

Re: Two factor authentication

Postby mclotet » Wed Aug 08, 2012 4:22 pm

... the data kept on Synology products is usually important and private


This is indeed what I had in mind. As I see it security is amongst the most critical issues for NAS products and adding such feature would be a big improvement.

I added a poll for people to vote this feature.
nalberti
I'm New!
I'm New!
Posts: 6
Joined: Sun Aug 12, 2012 12:17 am

Re: Two factor authentication

Postby nalberti » Tue Aug 14, 2012 6:46 am

Yubico YubiKey Support Please :)

I'm not sure why anyone wouldn't want this as an optional feature, Google Authenticator is free, a YubiKey is ~$25..
trezoristo
I'm New!
I'm New!
Posts: 3
Joined: Mon Feb 20, 2012 8:55 am

Re: Two factor authentication

Postby trezoristo » Sun Oct 21, 2012 11:09 am

I just want to add my support for this feature. As others have mentioned, because a NAS often contains personal files and is exposed directly to the internet, it is important to be on the forefront of security technology. Furthermore, because of free apps like Google Authenticator that don't require text-messages to be sent, such a feature needn't be expensive.
level380
Enlightened
Enlightened
Posts: 400
Joined: Thu Dec 13, 2007 12:31 am

Re: Two factor authentication

Postby level380 » Wed Oct 31, 2012 12:23 am

+1 to supporting Google Authenticator
User avatar
kc6108
Novice
Novice
Posts: 51
Joined: Wed Sep 19, 2012 4:30 pm

Re: Two factor authentication

Postby kc6108 » Wed Oct 31, 2012 6:22 pm

+1

Perhaps Verisign VIP?
NAS: Synology 1812+
Hard Disks: 8 x Seagate Barracuda 3 TB (ST3000DM001)
RAID Type: SHR, with 1-disk redundancy
Additional RAM: Kingston 2 GB 1066MHz DDR3
UPS: APC BR1500G w/ BR24BPG External Battery Pack
Main Router: Cisco SA540
Access Points: 3 x Linksys E4200
Main Switch: Netgear GS724Tv3
Other Switches: Several 5- and 8-port D-Link switches
id084895
Trainee
Trainee
Posts: 18
Joined: Sat Sep 08, 2012 8:48 am

Re: Two factor authentication

Postby id084895 » Fri Nov 02, 2012 9:57 am

+1 for Google Authenticator (dropbox supports it as well!)
msh317
I'm New!
I'm New!
Posts: 1
Joined: Sun Nov 04, 2012 1:55 pm

Re: Two factor authentication

Postby msh317 » Sun Nov 04, 2012 1:59 pm

I agree with the addition of Google authentication and the addition of both Google Drive and Dropbox to the cloud file sync.

Two factor authentication or multi factor would be a good security addition along with sharing of blocked IP addresses in the form of a distributed blacklist.
shcam
I'm New!
I'm New!
Posts: 3
Joined: Sat Nov 10, 2012 2:40 pm

Re: Two factor authentication

Postby shcam » Sat Nov 10, 2012 2:55 pm

It would be good to be able to selectively enable two-factor authentication by group: i.e. to be able to enable this for DSM web access by the administrators group only.
heliostatic
Trainee
Trainee
Posts: 19
Joined: Tue Feb 08, 2011 1:30 am

Re: Two factor authentication

Postby heliostatic » Thu Dec 13, 2012 7:20 pm

Authy (http://authy.com) is looking to be the one stop shop for 2-factor auth. Might be nice to use them as a provider.
synology2013
I'm New!
I'm New!
Posts: 2
Joined: Tue Dec 10, 2013 3:41 pm

Re: Two factor authentication

Postby synology2013 » Tue Dec 10, 2013 3:46 pm

Yes, with yubikey directly to the yubico online api...
With a fallback to a local password if yubico is offline (or internet connection is down ;))
bbrotschi
I'm New!
I'm New!
Posts: 5
Joined: Thu Sep 11, 2014 3:57 am

Re: Two factor authentication

Postby bbrotschi » Fri Sep 26, 2014 2:36 am

I am new to Synology devices, and being a Symantec employee I would like to see support for the use of VIP two factor authentication. It appears as though the Google option is the only one I can use. Has anyone figured out how to use Symantec / Verisign VIP ?
edanto
Novice
Novice
Posts: 45
Joined: Tue Oct 06, 2015 9:50 pm

Re: Two factor authentication

Postby edanto » Tue Apr 19, 2016 4:48 am

I am looking (for the first time) at the LDAP server available from the Synology App set and would like to use a new Yubikey NEO to (connected by NFC to my phone which may be on lan or remote to the NAS) to validate identity.

For bonus points, I would like to use the same user database to authenticate users to a discourse install which I have just installed on the Synology NAS.

And then, if it turns out that both of those are really easy, I'd like to use a webhook to pull names, photos, email addresses and mobile numbers from a database (3rd party online tool with API).... and have users of a certain permission level and above forced on to yubikey or SMS (one time only) verification.

Where do I start?!
Watch out; the forum won't email you by default when someone replies!

Fix this: Click User Control Panel near the top-right, click the Board preferences tab, click Edit posting defaults, change "Notify me upon replies by default" from the default of No to Yes, click Submit.

To ask the admins to change this default setting, find the thread in Feature Requests & Product Improvement Suggestions forum (not allowed to include a link here).
User avatar
SwissDave
I'm New!
I'm New!
Posts: 3
Joined: Tue Apr 19, 2016 8:18 am

Re: Two factor authentication

Postby SwissDave » Tue Apr 19, 2016 9:33 am

So there is no way to configure Two factor authentication even with the console (Linux)?

This Feature would be a nice and well needed addition!

Return to “Feature Requests & Product Improvement Suggestions”

Who is online

Users browsing this forum: Yahoo [Bot] and 1 guest