Last modified by Agnease on 2026/05/23 18:56

From version 1.10
edited by Agnease
on 2026/05/22 03:23
Change comment: There is no comment for this version
To version 1.7
edited by Agnease
on 2026/05/19 06:09
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -17,8 +17,8 @@
17 17   </p>
18 18  
19 19   <p class="hero-support">
20 - This extension protects XWiki accounts with an additional verification step after the standard username and password login.
21 - Users can verify access with an authenticator app code or an email-delivered code, while XWiki keeps its familiar login experience.
20 + This extension protects XWiki accounts with time-based one-time verification codes while keeping the familiar
21 + XWiki username and password authentication as the first login step.
22 22   </p>
23 23  
24 24   <div class="hero-actions">
... ... @@ -36,14 +36,13 @@
36 36  
37 37   <p>
38 38   The XWiki Two-Factor Authentication extension adds an additional verification screen after the standard
39 - username and password login. Users confirm their identity with a time-based one-time code generated by an
40 - authenticator app, or with a verification code delivered by email.
39 + username and password login. Users confirm their identity with a time-based one-time code before accessing
40 + the wiki.
41 41   </p>
42 42  
43 43   <p>
44 44   The extension is designed for organizations that want to improve account security while keeping authentication
45 - close to the standard XWiki login experience. It also supports remembering trusted clients beyond the current
46 - session, so users are not forced to enter a second factor again on every login from the same trusted browser.
45 + close to the standard XWiki login experience.
47 47   </p>
48 48  
49 49   <p>
... ... @@ -56,9 +56,7 @@
56 56   <h3 id="quick-facts-title">Quick facts</h3>
57 57   <ul>
58 58   <li>Works with the standard XWiki login flow</li>
59 - <li>Supports authenticator app verification codes</li>
60 - <li>Supports email-delivered verification codes</li>
61 - <li>Can remember trusted clients beyond the current session</li>
58 + <li>Adds a second TOTP verification step</li>
62 62   <li>Configuration available from wiki administration</li>
63 63   <li>User setup available during login or from the user profile</li>
64 64   <li>Administrators can enable, disable or reset MFA for users</li>