- 
    Change Request 
- 
    Resolution: Fixed
- 
    Minor 
- 
    4.0.32, 5.0.15rc1, 5.4.3
- 
    None
- 
        Sprint 106 (Nov 2023), Sprint 107 (Dec 2023), S2401, S24-W6/7, S24-W8/9, S24-W10/11, S24-W12/13
- 
        16
It would be great to create out-of-the-box Zabbix integration with Multi Factor Authentication provider or One Time Password service like Google Authenticator, DUO , Authy, etc.. to make Zabbix frontend authentication more secure
Example of fork implementation
Schema - Zabbix user connecting with LDAP or internal authentication to Frontend. After checking password - some one time password have generating with zabbix itself or with external provider usage. Zabbix user reiciving code by sms,e-mail, etc, put it into code requirementwindow in Frontend. Successful authentication
- causes
- 
                    ZBXNEXT-9158 Cannot reset/update 2FA settings -         
- Reopened
 
-         
- 
                    ZBXNEXT-9159 2FA code is required every time even if remember me for 30 days is set -         
- Reopened
 
-         
- 
                    ZBX-24413 Can not use MFA with multiple logins -         
- Closed
 
-         
- 
                    ZBX-24603 User removal from MFA group must delete TOTP secret -         
- Closed
 
-         
- depends on
- 
                    ZBXNEXT-7690 enable capchta on zabbix -         
- Open
 
-         
- 
                    ZBX-19918 The first visit of login page is logged to audit log as "guest" user login, when "Guests" group is enabled -         
- Closed
 
-         
- 
                    ZBX-23663 Can't enable SAML without PHP LDAP extension -         
- Closed
 
-         
- is duplicated by
- 
                    ZBXNEXT-4966 Provide support for RFC 6238 Time-based One-time Password Algorithm (OATH-TOTP) -         
- Closed
 
-         
- 
                    ZBXNEXT-2606 Use Google 2 Factor Authentication -         
- Closed
 
-         
- 
                    ZBXNEXT-8748 2FA for 6.4.7 -         
- Closed
 
-         
- mentioned in
- 
                    Page Loading... 


















