# Support of Two Factor auth in absence of OIDC

**URL:** https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711
**Category:** Get Help
**Created:** [February 6, 2020, 10:41pm UTC](https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711 "2020-02-06T22:41:27Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![KMuriki](https://avatars.discourse-cdn.com/v4/letter/k/838e76/32.png) [@KMuriki](https://discourse.openondemand.org/u/KMuriki)
#### Post date: [February 6, 2020, 10:41pm UTC](https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711/1 "2020-02-06T22:41:28Z")

</div>

I’m trying to configure our OOD instance to use the same two factor authentication service (LinOTP + Radius + SSH/PAM) that our users use for SSH’ing into our cluster. We do not have a fully functional OIDC setup so I cannot use something like Keycloak as suggested in the documentation. Instead I’m trying to get it working using mod\_intercept\_form\_submit + mod\_authnz\_pam ([https://www.adelton.com/apache/mod\_intercept\_form\_submit/](https://www.adelton.com/apache/mod_intercept_form_submit/)).

Anyone with experience trying similar options with their OOD installation ? Please let me know we can share notes.

Thanks,  
Krishna.

---

<div class="post-metadata">

### Author: ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)
#### Post date: [March 26, 2020, 2:33pm UTC](https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711/2 "2020-03-26T14:33:00Z")

</div>

Maybe @tdockendorf can shed some light on this request?

---

<div class="post-metadata">

### Author: ![tdockendorf](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/tdockendorf/32/202_2.png) [@tdockendorf](https://discourse.openondemand.org/u/tdockendorf)
#### Post date: [March 26, 2020, 2:58pm UTC](https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711/3 "2020-03-26T14:58:12Z")

</div>

Sorry, I have no experience with mod\_intercept\_form. If the authentication can be performed via SSSD based logins via SSH and the OTP step can be setup to autopush or require no input from the user, there is the possibility of using Keycloak’s SSSD integration.

---

<div class="post-metadata">

### Author: ![westburg.2](https://avatars.discourse-cdn.com/v4/letter/w/0ea827/32.png) [@westburg.2](https://discourse.openondemand.org/u/westburg.2)
#### Post date: [May 26, 2022, 3:37pm UTC](https://discourse.openondemand.org/t/support-of-two-factor-auth-in-absence-of-oidc/711/4 "2022-05-26T15:37:11Z")

</div>


