MFA for HCL Domino

enable mfa for web mail

https://dominomfa.com

MFA for HCL Domino

Install

Domino console command to install this app on your server: (1.5.0)

tell Genesis install mfa-full

Install in MyAccount (for Prominic customers only)

Source code

View on GitHub, OpenNTF etc
Open in Moonshine

If the project doesn't open in Moonshine-IDE, then run Project > Import Genesis Directory Application and paste the below URL.

The new tool is called MFA for HCL Domino®. It is free and open source, licensed under the Apache license and it provides both SMS and TOTP support, a fully customizable user interface, and multi-language prompts

The main benefits of MFA for HCL Domino® from Prominic are SMS support and a tailored user interface, as compared to TOTP. It can be customized to suit your needs (another SMS gateway, new methods of MFA, OTP token generation etc). It makes it easy to customize the logo and text shown to the user at each step, and in multiple languages.

It is possible to install only a specific component:

mfa.nsf only

tell Genesis install mfa

domcfg.nsf only

tell Genesis install mfa-domcfg

replicate mfa from another server

tell Genesis install mfa-replica ${serverName}

Read more... (PDF)

Version: 1.5.0

{
  "title": "MFA for HCL Domino",
  "versionjson": "${versionjson}",
  "config": {
    "version": "${version}"
  },
  "steps": [
    {
      "title": "--- Step 1. Download files ---",
      "files": [
        {
          "from": "${baseurl}/0/${docid}/$FILE/mfa.nsf",
          "to": "${directory}/mfa.nsf"
        }
      ]
    },
    {
      "title": "--- Step 2. Configure Databases ---",
      "databases": [
        {
          "filePath": "mfa.nsf",
          "action": "update",
          "sign": true
        }
      ]
    },
    {
      "title": "--- Step 3 (final). Instruction ---",
      "messages": [
        "SUCCESS",
        "mfa.nsf v${version} installed.",
        "Freemium licence allows up to 25 users - contact Prominic.NET for more.",
        "Next: create/update the Config and Localization documents in mfa.nsf. Set BaseURL and AuthURL1 first - nothing works without them.",
        "Check the four Emails documents - the IDs must be exactly emailcode, device, password and secret, or that message silently never sends.",
        "Also review domcfg.nsf (login form mapping) and iMessageSMS.nsf (SMS/voice gateway)."
      ]
    }
  ]
}