Greenby & Roundcube- 2FA Additional Security for Metronet Email Addresses

[#1]

I have set up two factor authentication for logging into Greenby for my Metronet account which is a simple task and works without issue using the Microsoft Authenticator.

I assumed that if you set up two factor authentication for logging into Greenby, this would also apply to when logging in to view metronet webmail through the Roundcube Portal. This is not the case.

To create 2FA from when logging in to Metronet webmail through the Roundcube portal, there is a manual referenced that refers to downloading a plugin from GitHub. The notes in the supporting manual are not straightforward and appear out of date.

Whilst I can manage 2FA setup using QR codes scanned into 2FA apps, the steps required to set up 2FA when accessing Metronet webmail through the Roundcube portal are somewhat beyond me.

I would have expected that to set up 2FA when logging in to Metronet webmail through the Roundcube portal, it would be a simple task and similar to that when setting up 2FA for Greenby.

Has anyone managed to or looked at setting up two factor authentication when logging into Metronet webmail through the Roundcube portal.

[#2]

@Rickmia18 

To create 2FA from when logging in to Metronet webmail through the Roundcube portal, there is a manual referenced that refers to downloading a plugin from GitHub. The notes in the supporting manual are not straightforward and appear out of date.

I think that refers to adding 2FA support to the Roundcude installation , not individual accounts. From what I can see , 2FA appears to be supported on the Greenby Webmail.

If you login to Greenby webmail, go to Settings , there is a 2-Factor authentication option. I've not tried it but it does seem to offer 2FA setup.

Let us know if it works

[#3]

Yes - The 2FA that you can set up within Greenby works.

I have already set this up. Its easy to do and works without issue. I use the Microsot authenticator app.

When you view Metronet webmail for within the Greenby portal it directs you directly to Roundcube, however the problem is that if you view Metronet webmail by logging in directly through the Roundcube portal and not through the Greenby portal there is no 2FA.

If you want 2FA when logging in directly to Roundcube you have to set this up through the steps within the reference manual which you can download. This is somewhat above my knowledge level in respect of plugins and configuration settings.

What I find more confusiong is that I have googled 2FA for Roundcube and there are a lot of different guides, tutorials and you tube videos as to how to do this.

[#4]

@Rickmia18 

however the problem is that if you view Metronet webmail by logging in directly through the Roundcube portal and not through the Greenby portal there is no 2FA.

I'm not quite sure I understand what you mean here ? , you can login to webmail directly via https://webmail.greenby.com/ and the option for 2FA is available

[#5]

Yes - Agreed, however if you log in to Roundcube through here: -

https://webmail.enmail.co/

You can access your Metronet email without 2FA - Even though its been previously been setup within Greenby.

The way to see this would be to: -

1. Setup 2FA for Greenby, then log out.

2. Prove that you have to use 2FA to log in to Greenby, then log out

3. Log in to Roundcube using https://webmail.enmail.co/

I can log in to my metronet email using https://webmail.enmail.co/ without any 2FA.

[#6]

@Rickmia18 

What if you login to Roundcube select ->Settings -->2-Factor Authentication does that work?

[#7]

Yes you can however it is not a simple as setting up 2FA for Greenby. If you log in to your Metronet webmail through Roundcube, there is a link within the 2FA option where you can download a manual. I have attached it as a file attachment.

From the guidance in the manual, you have to download a plugin and then configure it. Looking at the instructions in the manual this is not as easy as setting 2FA up for Greenby.

[#8]

Here is the link to the manual for setting up 2FA within Roundcube

https://github.com/alexandregz/twofactor_gauthenticator/tree/master?tab=readme-ov-file#usage

[#9]

Maybe I'm confused, I thought you wanted 2FA enable for webmail email login.

I see the above for the email address set with 2FA, a email set with no 2FA just logins in.

My email free-online.co.uk

I clicked on  checked the OK popup, all the fields were populated, checked the authenticator code, then save.