Two-factor authentication for admins

[nowen]

Greetings:

I am interested (thanks to a prospect's request) in documenting how to adding the WiKID two-factor authentication system (WiKID Commercial Open Source Two-Factor Authentication) to the cpanel administration login. I've dug through the docs a bit, but can't seem to find a reference. I assume it is a change to one of the apache configs, but it is unclear which one. I've already done a number of apache & WiKID how-tos using mod_auth_radius, ldap, etc, so I just need to know where to put the directive.

The goal is to require a one-time passcode for the administer to be able to login to the cpanel admin for additional security/protection from weak or stolen passwords. Mutual https auth will probably be a part of it as well as 2FA for SSH. I will gladly doc the whole process.

any guidance appreciated.

nick