./Shade.sh

Have you ever searched for a good, secure, not complex, customizable and cheap 2nd factor implementation?

Stop searching!

PrivacyIDEA is one of the candidates i searched for a long long time… i already dealt with RSA, Kobil, Stonesoft, GoogleAuth (own build solution) and much more. I can now say, this is the most perfect solution for all your 2nd factor authentication needs. The most important part is, its OpenSource and everybody can check if there is some bug or backdoor and (!) its perfectly customizable!

It has all the plugins for Apps that you already love to use and already use in your daily work. FreeRadius, PAM, Nginx, Apache2, OpenVPN, Typo3 and much more!

It can be used with a lot of authentication mechanism, TOTP (Software or Hardware based), HOTP (Software or Hardware based), Email, Yubikey, and much much more! The interesting part is, you can also use your existing LDAP server (Microsoft, OpenLDAP and simliar) or local flat file (Linux Passwd) to map users to your 2nd factor tokens.

I used it with TOTP Software or Feitian Token in a MySQL Master-Master Active/Active setup with FreeRadius to authenticate users (Very large userbase!) for VPN on our Cisco ASA. It works as expected and so far without a single problem.

Give it a try if you ever searched for a cheap (Get commercial support if you use it in your company!), OpenSource, flexible and easy to use 2nd factor solution, you will not be disappointed.

PS: No, this is not a sponsored or paid article! I’m really convinced of this software!