Two-factor authentication with certificates for JOC Cockpit

Current Situation

• Clients, including user browsers and REST clients, can login to JOC Cockpit using an account and password.

Desired Behavior

• JOC Cockpit supports two-factor authentication, i.e. a second authentication scheme in addition to a password is required.

Implementation

• JOC Cockpit can be configured to use SSL mutual authentication, i.e. the Jetty Servlet Container requires a client to present a certificate for client authentication that is located with the client's device.
• In addition a password is required for login.
• See below linked article.