Grid Pattern Autentication

The Grid Pattern Authentication feature allows users to verify their identity by following a predefined pattern on a number grid.

Instead of receiving an OTP through email, SMS, or an authenticator application, users authenticate using a visual pattern known only to them. The method can work without a mobile device, internet connection, or external authentication application.

It helps provide:

  • Phone-free authentication
  • Offline-capable login verification
  • Protection against the reuse of observed number combinations
  • An additional security layer beyond the Drupal password
  • A simple visual authentication experience

Configuration

This step allows the user to create a unique authentication pattern.

Setup

  • Navigate to Configuration → People → miniOrange Two-Factor Authentication (2FA/MFA).
  • Open the 2FA for Primary Admin tab.
  • Select Grid Pattern from the left-side menu.
  • Click the Configure button in the Grid Pattern section.
  • The Configured Grid Pattern pop-up will open; Select any four tiles in the preferred sequence to create the pattern in Step 1.
  • In Step 2, enter those numbers in the same sequence in which the tiles were selected.
  • Click the Confirm Pattern button to save the configuration.

Important Authentication Rule

  • Users must remember the tile positions and sequence, not the numbers displayed during configuration.
  • The numbers inside the grid change during every login session, while the configured tile pattern remains unchanged.

Example:

  • Configured tile pattern: Top-left → Center → Bottom-right → Top-right
  • During configuration, these tiles may display: 3 → 8 → 1 → 6
  • During the next login, the same tiles may display: 7 → 2 → 9 → 4
  • The user must enter 7 → 2 → 9 → 4 because these are the current numbers displayed at the configured tile positions.
  • Entering the original numbers 3 → 8 → 1 → 6 will not authenticate the user.

How It Works During Login

  • The user enters their Drupal username and password.
  • A number grid is displayed on the next authentication screen.
  • The numbers inside the grid are generated dynamically for that session.
  • The user follows the same tile sequence configured during setup.
  • The user can either click the required tiles or manually enter the numbers displayed on those tiles.
  • If the entered pattern is correct, the user is logged in to the Drupa.