Changes for page XWiki Two-Factor Authentication
Last modified by Agnease on 2026/05/23 18:56
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -35,20 +35,21 @@ 35 35 <h2 id="overview-title">Stronger login protection for XWiki</h2> 36 36 37 37 <p> 38 - The XWiki Two-Factor Authentication extension adds a n additional verificationscreenafter the standard39 - username and password login. Users confirmtheir identitywitha time-basedone-timecode generatedbyan40 - authenticat or app, or with a verificationcode delivered by email.38 + The XWiki MFA / Two-Factor Authentication extension adds additional verification after the standard 39 + XWiki username and password login. It strengthens account protection without replacing the familiar 40 + XWiki authentication flow. 41 41 </p> 42 42 43 43 <p> 44 - The extension isdesigned fororganizations thatwanttoimproveaccountsecurity whilekeepingauthentication45 - closetothestandardXWiki login experience.It alsosupports rememberingtrustedclientsbeyondthe current46 - session, sousersarenotforced toentera secondfactor againoneverylogin fromthesametrustedbrowser.44 + The extension supports authenticator app codes using TOTP, email-delivered one-time verification codes, 45 + and stricter configurations where both verification methods are required. This allows organizations to 46 + choose between a simpler 2FA setup or a stronger multi-step MFA policy. 47 47 </p> 48 48 49 49 <p> 50 - It can be useful for internal knowledge bases, intranets, documentation platforms, SOP systems, or other 51 - XWiki environments where access to content and administration should be better protected. 50 + Trusted clients can also be remembered for a configured period. In practice, this means that a known 51 + browser or device can avoid repeated MFA prompts, while new or untrusted clients still require the 52 + configured verification steps. 52 52 </p> 53 53 </article> 54 54