Integrating Multi-Factor Authentication (MFA) with iwaredir.nsf on HCL Domino 12.0.2 FP4

Hello everyone,

I am seeking assistance in configuring multi-factor authentication (MFA) with TOTP on an HCL Domino 12.0.2 FP4 server. While MFA functions correctly with standard web authentication, I am interested in understanding if and how MFA can be integrated within iwaredir.nsf.
Context:
Domino 12.0.2 FP4 is installed and configured.
ID Vault is set up and operational.
MFA is enabled in the server configuration documents.
Users can set up their TOTP using Google Authenticator.
Questions:

Is it possible to configure MFA (TOTP) with iwaredir.nsf to enforce two-factor authentication before accessing iNotes?
If so, what modifications are necessary in iwaredir.nsf or elsewhere to enable this additional authentication layer?
Is there official HCL documentation or recommendations on this subject?

Hi,

I don't think you have an option in the iwaredir.ntf to force MFA because this feature directly is configured either in the server document ( port configuration ) or in the website document.

Hi,

there is an openNTF webinar from Keith Brooks about TOTP - This is the Way

In his webinar he explain everything about TOTP (configuration, troubleshooting, etc.)

Here is the link to his presenation

https://www.openntf.org/Public/presentations.nsf/0/F892DC73C9626FDC862589740072F36F/$FILE/OpenNTF-2023-Mar.pdf

MFA option is indeed present in the DWALoginForm within the redirect template iwaredir.ntf as it is an inbuilt functionality of the database and you don't have to customize it.

You need to enable below option in the iNotes redirect database under UI Setup as shown below.

Thank you

Regards

Shrikant J

Thank you for your help

Did you follow this method to implement TOTP in iNotes Login form using the iwaredir.nsf database ?. Thank you

Yes, I followed this method to implement TOTP in the iNotes login form using the iwaredir.nsf database.

Thank you for the detailed information! I appreciate the clarification that the MFA option is already present in the DWALoginForm within the iwaredir.ntf template and does not require customization. I will proceed with enabling the option in the iNotes redirect database under UI Setup as instructed.

Thanks again for your support!