Page 1 of 1

Zimbra 9 NE, 2FA and mobile app

Posted: Wed May 20, 2020 9:53 am
by rosole
Hello.

I'm testing Zimbra 9 NE.
Enabled 2FA for users (Yubikey and Yubikey authenticator configured correctly).
Users can use 2FA to login into Zimbra using Web App or Zdesktop.

The issue is that users cannot login to Zimbra using their mobile apps.
Is there any mobile app that support 2FA or another way to use mobile app without force using 2FA (2FA have to be enabled for Web App)?

Thank you for any suggest.

Re: Zimbra 9 NE, 2FA and mobile app

Posted: Wed May 20, 2020 11:56 am
by L. Mark Stone
Zimbra requires you to configure application-specific passwords for each device that does not natively support 2FA.

The 2FA wiki describes the process.

Hope that helps,
Mark

Re: Zimbra 9 NE, 2FA and mobile app

Posted: Thu May 21, 2020 11:46 am
by rosole
Hello Mark.

Understand.
I check my trusted devices - got two zdesktops apps.

Mail on Mac got errors like:

Handling autodiscover request...
User password mismatch; user=
HTTP/1.1 401 Invalid username or password
Handling autodiscover request...
No basic auth header in the request

Of course, password i ok, Mail on Mac do not understand that user can put additional code to trust this app/device.

Do you know which application support such additional code from Zimbra?

Thank you.

Re: Zimbra 9 NE, 2FA and mobile app

Posted: Thu May 21, 2020 11:57 am
by rosole
Ok, i've figured out.
In this documentation on the bottom there is nice description, how to do that:

https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication

Look at: Issue - Mail client issues with application passcode

Thank you for help.