Applications:EZ Publish YubiKey Extension

From Yubico

eZ Publish CMS by eZ Systems

eZ Publish is PHP based open source enterprise content management system developed by the Norwegian company eZ Systems. eZ Publish is freely available under the GPL licence, as well as under proprietary licenses that include commercial support.

» More information
» Watch video

The idea of this extension is to provide eZ Publish with a two-factor authentication capability. The YubiKey is an affordable but yet very secure way to provide this feature, it's the perfect companion for a CMS.

The QH YubiKey extension for eZ Publish is mainly made of a custom login handler and a data type to record and validate a main and a backup YubiKey. It also allows to choose between a two-factor authentication mode combining the existing password with the secure 128 bit OTP generated by the YubiKey; and a one factor authentication with the YubiKey replacing the existing password, which is less secure than the two-factor auth but still much more secure than using the password only.

In its current state, the QH YubiKey extension for eZ Publish uses Yubico validation server to validate the OTP submited and authenticate the user into eZ Publish CMS. But it would be possible to implement your own local validation server and adapt the extension to use it.

Installing and using the extension is very simple:

- Install and activate the ‘qhyubikey’ extension
- Edit the ‘user’ content class and add a new ‘YubiKey’ attribute
- Edit your user account and register your yubikey(s) by recording their OTP