How to configure true 2FA (LDAP + Google Authenticator OTP) for OpenVPN on pfSense?
-
Hi,
I have a VPN implemented with OpenVPN on pfSense, and I would like to configure VPN access credentials to use two-factor authentication (2FA) combining LDAP (via FreeRADIUS-LDAP) for username/password and OTP via Google Authenticator.
Currently, I can successfully authenticate using either FreeRADIUS-LDAP or Google OTP separately, but I’m unable to enable both in the same authentication session to achieve true 2FA.
Is it possible to configure pfSense so that OpenVPN requires LDAP credentials and an OTP code during the same login process?
If so, could you provide guidance, best practices, or documentation on how to set this up?
Thank you in advance! -
Throw this in Google :
and you get this back : FreeRadius on pfSense software for Two Factor Authentication.
LDAP is also mentioned : "How to integrate FreeRadius with LDAP on pfSense?"
-
@Gertjan
I know the guides and they work, but separately. I would like the same user, when connecting with OpenVPN, to first authenticate with LDAP and then immediately afterward with Google Authenticator: Prompt 1 = LDAP, Prompt 2 = Google OTP. Following the guides, in fact, either one or the other method works, but not both simultaneously in the same authentication session. -
G Gertjan referenced this topic on