Sign in Join

Live chat for Free Pascal, Lazarus, Delphi and every Pascal programmer.

Catalog · How the catalog works

Random project

AD-OTP

Google OTP Integration for Active Directory

View on GitHub

Anyone may press Interesting, signed in or not. It helps others find this project.

Member rating

No ratings yet.

Sign in to rate this project.

README

AD-OTP

Google OTP Integration for Active Directory

Overview

Welcome to the Google OTP Integration for Active Directory repository. This project provides a seamless solution to enhance the security of your Active Directory environment by integrating Google OTP (One-Time Password) for two-factor authentication (2FA). This ensures that only authorized users with the correct OTP from Google Authenticator can access your Active Directory services.

Features

Two-Factor Authentication (2FA): Adds an additional layer of security by requiring a Google OTP in addition to the standard Active Directory password.
Easy Setup: Simple configuration and integration process with detailed documentation.
Compatibility: Works with existing Active Directory setups without requiring significant changes.
User Management: Allows administrators to manage OTP settings for individual users.
Secure Authentication: Utilizes secure methods to generate and verify OTPs, ensuring robust protection against unauthorized access.

Prerequisites

Active Directory environment (Windows Server 2012 R2 or later)
Google Authenticator or any other TOTP-based application
Delphi IDE (RAD Studio 12 or later)
Administrative access to the Active Directory server

Installation

pascal
Clone the Repository:
pascal
git clone https://github.com/biff31337/AD-OTP.git
pascal
Open in Delphi IDE:
    Open the Delphi project group file (ad_otp_prj.groupproj) in RAD Studio.
pascal
Configure the Application:
    Nothing to do here.
pascal
Build the Project:
    Compile the project in Delphi IDE to generate the executables.
pascal
Run the Integration Application:
    Execute ad_otp.exe as administrator to start the integration process.

Usage

Configuration

Open (menue) Configuration -> Global Settings, edit name of domaincontroller, name of domain and useraccount for service.
Press Install service to register ad_otp_service.exe and start it immediatly.

User Enrollment

Users need to enroll their accounts with a TOTP application like Google Authenticator.
Open (menu) Configuration -> User configuration and create new user, edit usernname and static part of desired password, check activated.
Scan QR code with Google authentificator app to add account.
The Set Password button tries to update the useraccount to check if everything is working (password rules etc...).

Authentication

Upon logging in, users will have to add OTP from their TOTP application in addition to their password.

Contributing

We welcome contributions from the community!

License

This project is licensed under the MIT License. See the LICENSE file for details.

Downloads

All binary releases and source code: https://github.com/biff31337/AD-OTP/releases

Support

If you encounter any issues or have questions, please open an issue on GitHub or contact me at frank.liebig@kakiarts.de.

Acknowledgements

pascal
Inspired by various 2FA implementations and security best practices.
https://github.com/BoscoBecker/Delphi-and-Google-Authenticator
https://github.com/foxitsoftware/DelphiZXingQRCode
https://github.com/wendelb/DelphiOTP