Multi-Factor Authentication (2FA/MFA) for WordPress

Last updated on October 16, 2024

Overview

Rublon Multi-Factor Authentication (MFA) for WordPress is a plugin that provides Multi-Factor Authentication for WordPress. Rublon integrates with the self-hosted version of WordPress to add Multi-Factor Authentication to every login.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
WebAuthn/U2F Security Key	✔	N/A
Passcode	✔	N/A
SMS Passcode	✔	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	✔	N/A
Email Link	✔	N/A
YubiKey OTP Security Key	✔	N/A

Before you start

You need to make some preparations before installing the plugin.

First of all, ensure you have properly deployed and configured your self-hosted WordPress.

Then:

1. Visit the Rublon Admin Console and log in to your organization, or create a new organization if you do not have an organization yet.

2. Create a new application in the Applications tab by clicking the Add Application button:

• Enter WordPress as Name.
• Leave out the URL empty or provide the URL to your WordPress.
• Select WordPress as Type.
• Click Save.

3. Go to the Applications tab, locate your newly added WordPress application and copy the values of System Token and Secret Key. You are going to need these values later when configuring the plugin.

Installation

There are two ways to install the Rublon Multi-Factor Authentication (MFA) for WordPress plugin:

• WordPress Plugin Search Installation
• Manual Installation

We recommend you install the plugin via the WordPress Plugin Search function.

WordPress Plugin Search Installation

1. Log in to your WordPress administration panel using an administrator account.

2. Go to Plugins → Add New and search for “Rublon” using the plugin’s search box on the right.

3. Click the Install Now button inside the Rublon plugin box in the search results.

4. Once your installation is complete, click Activate.

5. You will be redirected to the Installed Plugins page. Note that now Rublon Multi-Factor Authentication (MFA) appears on the list of Plugins.

6. Your installation is complete. You have to configure the plugin now.

Manual Installation

1. Download the Rublon Multi-Factor Authentication (MFA) for WordPress plugin manually from the official WordPress Plugins repository.

2. Go to Plugins → Add New.

3. Click the Upload Plugin button at the top of the page.

4. Select the downloaded plugin (the ZIP file) and click Install Now.

5. After a successful installation, go to the Installed Plugins page. Note that now Rublon Multi-Factor Authentication (MFA) appears on the list of Plugins.

6. Your installation is complete. You have to configure the plugin now.

Configuration

1. Click the Settings link in the Rublon Multi-Factor Authentication (MFA) box on the Plugins page.

2. Fill in the form. Refer to the following image and table for more information.

Note: The API URL field is for information purposes only and cannot be edited.

System Token	Enter the System Token of the WordPress application fetched from the Rublon Admin Console.
Secret Key	Enter the Secret Key of the WordPress application fetched from the Rublon Admin Console.
XML-RPC	XML-RPC allows external applications to administer your website without having to authenticate through Rublon. We strongly recommend you keep XML-RPC disabled.
Rublon Badge	Check to display Rublon Badge on login form (wp-login.php).

3. Click Save Changes to save the changes. Information that your application is connected to an organization will appear in the Rublon Admin Console section.

4. Your configuration is complete. You can now log in to WordPress with Rublon MFA.

Log in to WordPress with Rublon MFA

1. Log out if you are logged in.

2. Provide your WordPress credentials and click Log In.

3. A window with a selection of various MFA options from Rublon will appear. Let’s choose Mobile Push.

4. You will be sent a push notification. Tap APPROVE.

5. You will be successfully logged in to WordPress.

Solutions to Known Errors

1. Application not found. [E_0] – The System Token is incorrect. Navigate to Plugins → Rublon Multi-Factor Authentication → Settings and inspect the System Token value comparing it to the value in the Applications tab of the Rublon Admin Console.
2. Rublon error code: Invalid response signature: – The Secret Key is incorrect. Navigate to Plugins → Rublon Multi-Factor Authentication → Settings and inspect the Secret Key value comparing it to the value in the Applications tab of the Rublon Admin Console.

Troubleshooting

If you encounter any issues with your Rublon integration, please contact Rublon Support.