2FA not supported on the UDM?

[ServiceXp]

It appears 2FA is not supported using local credentials on the UDM or did I mess something up? I have confirmed the correct credentials.

UDM: Unifi 2FA not supported: The remote server returned an error: (499) unknown.
UDM: Unifi login failure (1): The remote server returned an error: (404) Not Found.

[stefxx]

2FA is not supported. Youll need to add local credentials to your admin account and use those for the plugin.

[ServiceXp]

2FA is not supported. Youll need to add local credentials to your admin account and use those for the plugin.

Limited or Super Admin?

[stefxx]

Either.

[MNB]

Me thinks the correct answer is to Disable 2FA by...

How to Disable 2FA

1. Go to https://account.ui.com and sign in.
2. Select Security from the menu.
3. Under the Two-Factor Authentication header, click on the Disable Two-Factor Authentication toggle.
4. Use Google Authenticator on your mobile to get a token to insert in the field provided.
5. Click Submit.

Once that's done then normal local log-on works great...MTC, unless there's another process?

[stefxx]

Hi MNB yes that would work but I would never recommend disabling 2FA on your Unifi cloud account. It is safer to create a local-only account specifically for the plugin instead.

[MNB]

Stefan, thanxs for the comeback.. I understand your recommendation but I'm not clear as to how to "create a local-only account specifically for the plugin instead" if you would be so kind and advise the steps so that one might accomplish this, thanxs in advance, Mike

[stefxx]

Here is some general info on accounts:

https://help.ui.com/hc/en-us/article...-Other-Devices
and
https://help.ui.com/hc/en-us/article...and-user-roles

However, that doesn't really describe how to create a local only account. And while this is beyond the scope of the plugin (mostly because Unifi has changed this process several times recently), this is how to do it using the most recent Unifi OS version:

1) Login to your Unifi console
2) Select "Manage Users"
3) Click "Add User"
4) Fill in all required fields. Make sure to select "Local Access Only" for the "Account Type"
5) Click "Add"

[MNB]

Stefan, many thanxs for comeback and information. I agree that "this is beyond the scope of the plugin" but if one can not access "Local Access Only" as one rarely add for home accounts it kind of makes the plugin non useable not because of your craft but the oceans of user information to keep tabs on...

I'm assuming that once the new user is added as "Local Access" that "Limited Admin" as role is sufficient? Again thanxs as HomeSeer is always a learning event, Mike

[stefxx]

HI Mike, yes I use a "Limited Admin" for the HomeSeer plugin. Make sure to grant Administrator permissions on both Unifi Network and Unifi Protect (if you use both applications).

Alternatively you could just create a "Super Admin" that has Administrator permissions on all applications by default.