Two Factor Authentication

The Two Factor Authentication plugin allows allows Agents to use an Authenticator application of their choice on their mobile device for 2FA.

If configured, the Agent must scan a QR code from the app, and when they log into the helpdesk, they will be prompted to enter a 6-digit code displayed in the app to finish logging in.

This plugin requires downloading an Authenticator app on your mobile device. There are many different Authenticator apps to choose from for both Apple and Android devices. As long as the app has the ability to use the device’s camera to scan a QR code, it should work. Popular options include:

Google Authenticator:
Apple
Android

Microsoft Authenticator:
Apple
Android

Once the app has been installed on your mobile device, you will need to install and enable the plugin in osTicket.

First, you must download the plugin from our website. Please make sure you select the appropriate version of osTicket before proceeding to the plugin selection. Once downloaded, upload the plugin to your server and place it in the include/plugins/ folder. Make sure the plugin has appropriate file permissions and ownership so the webserver can read and execute.

Now you can install the plugin by logging into your helpdesk and navigating to Admin Panel > Manage > Plugins. Click Add New Plugin and click Install next to the desired plugin.

Add New Plugin


Install Plugin

To enable the plugin click on the name of the plugin in the list of installed plugins, set Status to Active, and Save Changes.

Enable Plugin

Once the plugin has been installed and enabled, it can be configured by going to:

Admin Panel | Manage | Plugins | Two Factor Authenticator | Instances

All Plugins


Two Factor Authentication Instances

To add a new instance simply click Add New Instance. Give the new instance any Name you want, set the Status to Active, and click the Config tab to start configuring the instance.

Add New Two Factor Authenticator Instance


Two Factor Authenticator Configuration

Once the plugin is enabled, Agents can configure Authenticator as their Default 2FA method by going to their profile.

Authenticator will be greyed out in the list until it has been configured.

User Profile


User Profile


2FA Options


2FA QR Code

Once you see the QR code, you will need to scan the code using an Authenticator app on your mobile device.

Add QR Code

Click ‘Scan barcode’.

Scan QR Code

Once you have scanned the barcode, you will see an entry on the app for osTicket.

2FA QR Code


QR Code Next

Enter the code displayed in the app and verify that it is correct.

QR Code Next


Setup Complete

Once the configuration is complete, you can choose Authenticator as your Default 2FA method.

Choose 2FA

The next time you log into the helpdesk, you will be prompted to enter the code shown in your Authenticator app to finish logging into the helpdesk.

Help Desk Login


2FA Code


Enter 2FA Code

Once verfied, you will be redirected to the helpdesk.