.. index::
    single: Two-step validation
    single: Authentication
    single: Google

Two-step Validation (with Google Authenticator)
===============================================

The ``SonataUserBundle`` provides an optional layer of security by including a support for a Two-step Validation process.

When the option is enabled, the login process is done with the following workflow:

* the user enters the login and password
* if the user get the correct credentials, then a code validation form is displayed
* at this point, the user must enter a time based code provided by the Google Authenticator application
* the code is valid only once per minute

So if your login and password are compromised then the hacker must also hold your phone!


Installation
------------

Add the following line to the ``composer.json`` file::

    "sonata-project/google-authenticator": "dev-master"

Edit the configuration file:

.. code-block:: yaml

    # app/config/config.yml

    sonata_user:
        google_authenticator:
            enabled: true
            server:  yourserver.com

Now if the ``User::twoStepVerificationCode`` property is not null, then a second form will be displayed.