Changes for page XWiki Two-Factor Authentication
Last modified by Agnease on 2026/05/23 18:56
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Objects (0 modified, 1 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 - xwiki-two-factor-authentication1 +XWiki Two-Factor Authentication - Content
-
... ... @@ -7,20 +7,16 @@ 7 7 <div class="container hero-inner"> 8 8 <div class="hero-kicker"> 9 9 <i class="fa fa-lock" aria-hidden="true"></i> 10 - XWiki securityextension10 + XWiki 2FA and MFA 11 11 </div> 12 12 13 13 <h1 id="product-title">XWiki Two-Factor Authentication</h1> 14 14 15 15 <p class="lead"> 16 - Add a second verification step to the standard XWiki login flow. 16 + Protect XWiki logins with a second verification step using authenticator app codes, 17 + email verification codes, or both. 17 17 </p> 18 18 19 - <p class="hero-support"> 20 - This extension protects XWiki accounts with an additional verification step after the standard username and password login. 21 - Users can verify access with an authenticator app code or an email-delivered code, while XWiki keeps its familiar login experience. 22 - </p> 23 - 24 24 <div class="hero-actions"> 25 25 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 26 26 <a class="btn btn-secondary" href="$xwiki.getURL('products.WebHome')">View all products</a> ... ... @@ -32,22 +32,22 @@ 32 32 <div class="container"> 33 33 <div class="product-layout"> 34 34 <article class="product-summary-card"> 35 - <h2 id="overview-title"> Strongerlogin protectionforXWiki</h2>31 + <h2 id="overview-title">Two-factor authentication built into XWiki</h2> 36 36 37 37 <p> 38 - TheXWiki Two-Factor Authenticationextensionadds an additional verification screen after the standard39 - username and password login. Users confirmtheir identitywitha time-basedone-timecode beforeaccessing40 - the wiki.34 + XWiki Two-Factor Authentication adds an additional verification screen after the standard 35 + XWiki username and password login. It improves account protection without replacing the 36 + familiar XWiki authentication flow. 41 41 </p> 42 42 43 43 <p> 44 - Theextensionis designedfororganizations thatwanttoimproveaccount security whilekeepingauthentication45 - c losetothestandardXWikilogin experience.40 + Users can verify access with TOTP codes generated by an authenticator app, with one-time 41 + codes delivered by email, or with a combined setup requiring both methods. 46 46 </p> 47 47 48 48 <p> 49 - It can beusefulforinternalknowledgebases,intranets,documentation platforms, SOP systems, or other50 - XWikienvironments whereaccesstocontentand administrationshouldbebetterprotected.45 + Trusted browsers or devices can be remembered for a configured period, reducing repeated 46 + verification prompts on known clients while still requiring verification from new or untrusted ones. 51 51 </p> 52 52 </article> 53 53 ... ... @@ -55,11 +55,11 @@ 55 55 <h3 id="quick-facts-title">Quick facts</h3> 56 56 <ul> 57 57 <li>Works with the standard XWiki login flow</li> 58 - <li> Adds asecond TOTP verificationstep</li>59 - <li> Configurationavailablefromwikiadministration</li>60 - <li> Usersetup available duringloginorfromtheuserprofile</li>61 - <li> Administrators can enable, disableor resetMFA forusers</li>62 - <li> Canbeusedon themainwiki and subwikis</li>54 + <li>Supports authenticator app codes using TOTP</li> 55 + <li>Supports email-delivered one-time verification codes</li> 56 + <li>Can require app code and email code together</li> 57 + <li>Can remember trusted browsers or devices</li> 58 + <li>Includes administration and user setup controls</li> 63 63 </ul> 64 64 </aside> 65 65 </div> ... ... @@ -69,9 +69,9 @@ 69 69 <section aria-labelledby="features-title"> 70 70 <div class="container"> 71 71 <h2 id="features-title">Main capabilities</h2> 68 + 72 72 <p class="section-intro"> 73 - The extension focuses on adding a practical second authentication step while keeping the standard XWiki login 74 - process and administration experience understandable. 70 + A focused set of MFA/2FA features for stronger XWiki account protection without changing the standard login experience. 75 75 </p> 76 76 77 77 <div class="product-feature-grid"> ... ... @@ -79,90 +79,69 @@ 79 79 <div class="feature-icon"> 80 80 <i class="fa fa-key" aria-hidden="true"></i> 81 81 </div> 82 - <h3>Second login step</h3>78 + <h3>Second verification step</h3> 83 83 <p> 84 - After the username and password are verified, users are asked to enter a time-based verification code. 80 + After username and password verification, users complete an additional step before accessing XWiki. 81 + The flow can require one verification method or both app and email codes. 85 85 </p> 86 86 </article> 87 87 88 88 <article class="product-feature"> 89 89 <div class="feature-icon"> 90 - <i class="fa fa- qrcode" aria-hidden="true"></i>87 + <i class="fa fa-mobile" aria-hidden="true"></i> 91 91 </div> 92 - <h3> Usersetupscreen</h3>89 + <h3>Authenticator app codes</h3> 93 93 <p> 94 - Users can configure theirverificationcodesetupduringloginorfromtheirXWikiprofilewhenneeded.91 + Users can verify access with TOTP codes generated by authenticator applications on mobile or desktop devices. 95 95 </p> 96 96 </article> 97 97 98 98 <article class="product-feature"> 99 99 <div class="feature-icon"> 100 - <i class="fa fa- sliders" aria-hidden="true"></i>97 + <i class="fa fa-envelope-o" aria-hidden="true"></i> 101 101 </div> 102 - <h3> Administration controls</h3>99 + <h3>Email verification codes</h3> 103 103 <p> 104 - Administrators can enable thefeatureglobally,manageuser-level activation,andreset ausersetupwhenrequired.101 + Users can receive one-time verification codes by email when an authenticator app is not available or preferred. 105 105 </p> 106 106 </article> 107 - 108 - <article class="product-feature"> 109 - <div class="feature-icon"> 110 - <i class="fa fa-user" aria-hidden="true"></i> 111 - </div> 112 - <h3>Profile integration</h3> 113 - <p> 114 - The extension adds user profile controls so the second-factor setup can be reviewed or reset from XWiki. 115 - </p> 116 - </article> 117 - 118 - <article class="product-feature"> 119 - <div class="feature-icon"> 120 - <i class="fa fa-random" aria-hidden="true"></i> 121 - </div> 122 - <h3>Fallback behavior</h3> 123 - <p> 124 - The extension can fall back to standard XWiki authentication when the feature is not enabled or not configured. 125 - </p> 126 - </article> 127 - 128 - <article class="product-feature"> 129 - <div class="feature-icon"> 130 - <i class="fa fa-sitemap" aria-hidden="true"></i> 131 - </div> 132 - <h3>Main wiki and subwikis</h3> 133 - <p> 134 - The extension is designed to support XWiki environments using the main wiki and subwikis. 135 - </p> 136 - </article> 137 137 </div> 138 138 </div> 139 139 </section> 140 140 141 -<section aria-labelledby=" use-cases-title">108 +<section class="product-section-muted" aria-labelledby="security-title"> 142 142 <div class="container"> 143 143 <div class="product-layout"> 144 144 <article class="product-summary-card"> 145 - <h2 id=" use-cases-title">Whenthisextensionisuseful</h2>112 + <h2 id="security-title">Useful for XWiki security and NIS 2 readiness</h2> 146 146 147 147 <p> 148 - Two-factor authentication is especially relevant when XWiki contains internal documentation, procedures, 149 - customer information, project knowledge, administrative pages, or business-critical content. 115 + Many organizations need multi-factor authentication for enterprise software, including internal 116 + knowledge bases, intranets, documentation platforms and systems containing operational procedures 117 + or sensitive business information. 150 150 </p> 151 151 152 152 <p> 153 - It is also useful when many users access the wiki remotely, when administrator accounts need stronger protection, 154 - or when the organization wants to reduce the risk of compromised passwords. 121 + For organizations using XWiki, adding two-factor authentication directly to the standard login flow 122 + can help close a practical access-control gap. It can be useful for administrator accounts, remote users, 123 + private knowledge bases and broader security readiness initiatives such as NIS 2 preparation. 155 155 </p> 125 + 126 + <p> 127 + This extension is not a complete compliance solution on its own, but it can provide an important 128 + technical control for protecting access to XWiki. 129 + </p> 156 156 </article> 157 157 158 - <aside class="product-info-card" aria-labelledby=" good-fit-title">159 - <h3 id=" good-fit-title">Goodfitfor</h3>132 + <aside class="product-info-card" aria-labelledby="security-controls-title"> 133 + <h3 id="security-controls-title">Useful for</h3> 160 160 <ul> 161 - <li>Private XWiki knowledge bases</li> 162 - <li>Company intranets</li> 163 - <li>SOP and controlled-document platforms</li> 164 - <li>Documentation portals with sensitive content</li> 165 - <li>Wikis with several administrators or remote users</li> 135 + <li>XWiki 2FA rollout</li> 136 + <li>XWiki MFA adoption</li> 137 + <li>Administrator account protection</li> 138 + <li>Remote user access protection</li> 139 + <li>Private knowledge base security</li> 140 + <li>NIS 2 readiness initiatives</li> 166 166 </ul> 167 167 </aside> 168 168 </div> ... ... @@ -169,30 +169,13 @@ 169 169 </div> 170 170 </section> 171 171 172 -#* 173 -<section aria-labelledby="gallery-title"> 174 - <div class="container"> 175 - <div class="product-gallery-panel"> 176 - <h2 id="gallery-title">Screenshots</h2> 177 - <p class="gallery-note"> 178 - Use this area to show the login verification screen, first-time setup, user profile controls, 179 - and administration configuration. 180 - </p> 181 - 182 - <div class="product-gallery-placeholder"> 183 - Replace this placeholder with the XWiki gallery macro and 3-5 screenshots from the application. 184 - </div> 185 - </div> 186 - </div> 187 -</section> 188 -*# 189 189 <section class="cta-section" aria-labelledby="cta-title"> 190 190 <div class="container"> 191 191 <div class="cta-panel"> 192 192 <h2 id="cta-title">Interested in using this extension?</h2> 193 193 <p> 194 - Send a short message with your XWiki version, authentication setup, and whether you use a singlewiki195 - or a mai nwikiwithsubwikis.152 + Send a short message with your XWiki version, authentication setup, and whether you need 153 + authenticator app codes, email verification codes, combined verification, or trusted-device remembering. 196 196 </p> 197 197 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 198 198 </div>
- Agnease.Code.SEODetailsClass[0]
-
- metaDescription
-
... ... @@ -1,0 +1,1 @@ 1 +Agnease Two-Factor Authentication for XWiki adds a second login verification step with authenticator app codes, email codes, combined verification and trusted-device remembering. - metaTitle
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki Two-Factor Authentication with 2FA and MFA Support | Agnease