2-factor authentication in ResourceSpace

Preface

A while back, one of our long-time clients came to us with a rather unusual request - selection, implementation, setup and customization of a digital asset management system. The implementation was what was being considered here, rather than development of such a system, and several requirements had to be met, specifically:

- the system is hosted locally at our client, on relatively non-standard (albeit powerful) hardware

- the system is free, as a possibility for a SAAS solution it was not taken into account at all

- the system needs little (or no) adjustments, so that it can go straight to setting up and installation

It was presumed that not just company staff, but also a lot of partners and contractors, such as advertising agencies and printing houses, would get access to the system.

Along with the client, we reviewed a number of solutions, and ultimately decided on ResourceSpace - while the system is far from perfect, it serves the minimum requirements, representing a fair trade-off in comparison with others of the kind.

Development

Besides other requirements, the list included obligatory two-factor authentication, which has been a standard for access control systems for a long time. The system supports authentication using LDAP, SAML, and even Wordpress SSO, but does not support the option our client required - authentication using a code that can be delivered by email or SMS. Eventually, the SMS option was removed from the requirements - users and contractors are spread across numerous countries, so the possibility of delivering the code by email was left. A search on Google and a question to GhatGPT yielded no results - there was simply no such plugin. Until now

Therefore, to meet this need of our client, we became one of the select few companies that create plugins for ResourceSpace - 2FA for ResourceSpace is complete and integrated successfully into the system. Throughout the development process, we adhered to all the system requirements:

- there are no changes made to the ResourceSpace core, making it possible to update to new versions smoothly

- the plugin utilizes the translation system built into ResourceSpace and supports translation into any language

- in order to change the login process to meet our client's specifications, we utilize the hook system, which makes it possible to rewrite or alter built-in functions

Plugin details

Besides the self-explanatory two-factor authentication function, the plugin has several settings:

- enable/disable

- determining the validity of a specific authentication code (3, 5 or 10 minutes)

- determining the number of tries to input the access code (1, 2 or 3 times)

With this, we managed to meet all the desires of our client for a DAM system that is effectively utilized and assists in business growth

If you require this or any other plugin, whether for ResourceSpace or not, please don't hesitate to contact us on the phone or via our contact form - we will be delighted to assist