Changes for page XWiki Two-Factor Authentication
Last modified by Alex Cotiuga on 2026/07/13 06:59
From version 22.3
edited by Alex Cotiuga
on 2026/06/24 15:15
on 2026/06/24 15:15
Change comment:
There is no comment for this version
To version 30.6
edited by Alex Cotiuga
on 2026/07/13 06:59
on 2026/07/13 06:59
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
-
Attachments (1 modified, 1 added, 0 removed)
Details
- Page properties
-
- Default language
-
... ... @@ -1,1 +1,0 @@ 1 -en - Hidden
-
... ... @@ -1,1 +1,1 @@ 1 - false1 +true - Content
-
... ... @@ -1,92 +1,91 @@ 1 1 {{velocity}} 2 2 #set ($discard = $xwiki.ssx.use('PublicWebSite.WebHome')) 3 -#set ($discard = $xwiki.ssx.use('products.WebHome')) 4 4 5 5 #set ($mainCapabilityItems = [{ 6 -'title': 'Second verification step', 7 -'icon': 'key', 8 -'content': 'Add an additional verification screen after the normal XWiki username and password login.' 5 + 'title': 'Second verification step', 6 + 'icon': 'key', 7 + 'content': 'Add an additional verification screen after the normal XWiki username and password login.' 9 9 },{ 10 -'title': 'Authenticator app codes', 11 -'icon': 'mobile', 12 -'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.' 9 + 'title': 'Authenticator app codes', 10 + 'icon': 'mobile', 11 + 'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.' 13 13 },{ 14 -'title': 'Recovery and trusted devices', 15 -'icon': 'shield', 16 -'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.' 13 + 'title': 'Recovery and trusted devices', 14 + 'icon': 'shield', 15 + 'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.' 17 17 }]) 18 18 19 19 #set ($adminExperienceItems = [{ 20 -'title': ' MFApolicy',21 -'icon': 'cog', 22 -'content': 'Make MFAoptional or required for all users from the XWiki Administration section.'19 + 'title': 'Rollout policy', 20 + 'icon': 'cog', 21 + 'content': 'Make additional verification optional at first or required for all users from the XWiki Administration section.' 23 23 },{ 24 -'title': 'Configuration options', 25 -'icon': 'sliders', 26 -'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.' 23 + 'title': 'Configuration options', 24 + 'icon': 'sliders', 25 + 'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.' 27 27 },{ 28 -'title': 'Administration overview', 29 -'icon': 'table', 30 -'content': 'Review MFAadoption with summary indicators and a filterable Live Data table.'27 + 'title': 'Administration overview', 28 + 'icon': 'table', 29 + 'content': 'Review adoption with summary indicators and a filterable Live Data table.' 31 31 }]) 32 32 33 33 #set ($userExperienceItems = [{ 34 -'title': 'Self-service setup', 35 -'icon': 'qrcode', 36 -'content': 'Users configure MFAfrom their profile by scanning a QR code or entering the setup key manually.'33 + 'title': 'Self-service setup', 34 + 'icon': 'qrcode', 35 + 'content': 'Users configure the second verification step from their profile by scanning a QR code or entering the setup key manually.' 37 37 },{ 38 -'title': 'Login verification', 39 -'icon': 'sign-in', 40 -'content': 'After the normal login, users enter the code generated by their authenticator app.' 37 + 'title': 'Login verification', 38 + 'icon': 'sign-in', 39 + 'content': 'After the normal login, users enter the verification code generated by their authenticator app.' 41 41 },{ 42 -'title': 'Trusted browser option', 43 -'icon': 'desktop', 44 -'content': 'Users can trust the current browser for the configured duration after successful verification.' 41 + 'title': 'Trusted browser option', 42 + 'icon': 'desktop', 43 + 'content': 'Users can trust the current browser for the configured duration after successful verification.' 45 45 }]) 46 46 47 47 #set ($selfServiceItems = [{ 48 -'title': 'Recovery codes', 49 -'icon': 'life-ring', 50 -'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.' 47 + 'title': 'Recovery codes', 48 + 'icon': 'life-ring', 49 + 'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.' 51 51 },{ 52 -'title': 'Trusted devices', 53 -'icon': 'desktop', 54 -'content': 'Trusted devices can be reviewed and removed from the user profile.' 51 + 'title': 'Trusted devices', 52 + 'icon': 'desktop', 53 + 'content': 'Trusted devices can be reviewed and removed from the user profile.' 55 55 },{ 56 -'title': 'Profile management', 57 -'icon': 'user', 58 -'content': 'Users can review MFAstatus, generate recovery codes, manage trusted devices and resetMFA.'55 + 'title': 'Profile management', 56 + 'icon': 'user', 57 + 'content': 'Users can review status, generate recovery codes, manage trusted devices and reset their setup.' 59 59 }]) 60 60 61 61 #set ($adminSupportItems = [{ 62 -'title': 'User MFAstatus',63 -'icon': 'user', 64 -'content': 'Administrators can open a user profile and check the MFAstatus for that account.'61 + 'title': 'User status', 62 + 'icon': 'user', 63 + 'content': 'Administrators can open a user profile and check the verification status for that account.' 65 65 },{ 66 -'title': ' MFAreset',67 -'icon': 'refresh', 68 -'content': 'Administrators can reset MFAwhen a user needs to restart the configuration process.'65 + 'title': 'Setup reset', 66 + 'icon': 'refresh', 67 + 'content': 'Administrators can reset the setup when a user needs to restart the configuration process.' 69 69 },{ 70 -'title': 'Controlled recovery', 71 -'icon': 'unlock-alt', 72 -'content': 'Resetting MFAremoves the authenticatorsetup, recovery codes and trusted devices for that user.'69 + 'title': 'Controlled recovery', 70 + 'icon': 'unlock-alt', 71 + 'content': 'Resetting the setup removes the authenticator configuration, recovery codes and trusted devices for that user.' 73 73 }]) 74 74 75 75 #set ($rolloutItems = [{ 76 -'title': 'Start with a pilot group', 77 -'content': 'Test the extension with administrators or a small user group before enabling it widely.' 75 + 'title': 'Start with a pilot group', 76 + 'content': 'Test the extension with administrators or a small user group before enabling it widely.' 78 78 },{ 79 -'title': 'Define the MFApolicy',80 -'content': 'Decide whether MFAshould be optional at first or required for all users.'78 + 'title': 'Define the rollout policy', 79 + 'content': 'Decide whether additional verification should be optional at first or required for all users.' 81 81 },{ 82 -'title': 'Configure recovery options', 83 -'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.' 81 + 'title': 'Configure recovery options', 82 + 'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.' 84 84 },{ 85 -'title': 'Inform users', 86 -'content': 'Explain how users configure MFA, save recovery codes and manage trusted devices.'84 + 'title': 'Inform users', 85 + 'content': 'Explain how users configure the authenticator app, save recovery codes and manage trusted devices.' 87 87 },{ 88 -'title': 'Monitor adoption', 89 -'content': 'Use the administration overview to identify users who still need to configure MFA.'87 + 'title': 'Monitor adoption', 88 + 'content': 'Use the administration overview to identify users who still need to configure protection.' 90 90 }]) 91 91 92 92 {{html clean="false"}} ... ... @@ -95,23 +95,26 @@ 95 95 <div class="container hero-inner"> 96 96 <div class="hero-kicker"> 97 97 <i class="fa fa-lock" aria-hidden="true"></i> 98 - XWiki 2FA andMFA97 + XWiki 2FA with MFA rollout support 99 99 </div> 100 100 101 -``` 102 -<h1 id="product-title">XWiki Two-Factor Authentication</h1> 100 + <h1 id="product-title">XWiki Two-Factor Authentication</h1> 103 103 104 -<p class="lead"> 105 - Protect XWiki logins with a secondverificationstep using authenticatorappcodes,106 - recoverycodesandtrusted devices.107 -</p> 102 + <p class="lead"> 103 + Protect XWiki logins with authenticator app verification, recovery codes, 104 + trusted devices and administration controls for a safer rollout. 105 + </p> 108 108 109 -< divclass="hero-actions">110 - <aclass="btnbtn-primary"href="$xwiki.getURL('contact.WebHome')">Askabout thisextension</a>111 - <aclass="btn btn-secondary"href="$xwiki.getURL('products.WebHome')">Viewall products</a>112 -< /div>113 - ```107 + <ul class="benefits"> 108 + <li><strong>Extension from €95/year</strong></li> 109 + <li><strong>Basic setup from €150</strong></li> 110 + <li>MFA rollout support available</li> 111 + </ul> 114 114 113 + <div class="hero-actions"> 114 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 115 + <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 116 + </div> 115 115 </div> 116 116 </section> 117 117 ... ... @@ -121,35 +121,32 @@ 121 121 <article class="product-summary-card"> 122 122 <h2 id="overview-title">Two-factor authentication built into XWiki</h2> 123 123 124 -``` 125 - <p> 126 - XWiki Two-Factor Authentication adds MFA support to the standard XWiki login flow. 127 - Users continue to sign in with their normal username and password, then confirm access 128 - with a time-based verification code from an authenticator application. 129 - </p> 126 + <p> 127 + XWiki Two-Factor Authentication adds an additional verification step to the standard 128 + XWiki login flow. Users continue to sign in with their normal username and password, 129 + then confirm access with a time-based code from an authenticator application. 130 + </p> 130 130 131 - <p> 132 - The extensionisdesignedfor organizationsthatwantstrongeraccessprotectionfor133 - internalknowledgebases,intranets,documentation platforms,customerportals andother134 - XWiki-based applications.135 - </p> 136 - </article> 132 + <p> 133 + The application has evolved beyond a simple login-code screen. It supports global 134 + enforcement, recovery codes, trusted devices, user self-service, administrator 135 + reset actions and an overview for monitoring adoption. 136 + </p> 137 + </article> 137 137 138 - <aside class="product-info-card" aria-labelledby="quick-facts-title"> 139 - <h3 id="quick-facts-title">Quick facts</h3> 140 - <ul> 141 - <li>Works with the standard XWiki login flow</li> 142 - <li>Supports TOTP authenticator applications</li> 143 - <li>Can require MFA for all users</li> 144 - <li>Includes one-time recovery codes</li> 145 - <li>Can remember trusted browsers or devices</li> 146 - <li>Includes user self-service controls</li> 147 - <li>Includes an administration overview</li> 148 - </ul> 149 - </aside> 150 -</div> 151 -``` 152 - 139 + <aside class="product-info-card" aria-labelledby="quick-facts-title"> 140 + <h3 id="quick-facts-title">Quick facts</h3> 141 + <ul> 142 + <li>Works with the standard XWiki login flow</li> 143 + <li>Supports TOTP authenticator applications</li> 144 + <li>Can require additional verification for all users</li> 145 + <li>Includes one-time recovery codes</li> 146 + <li>Can remember trusted browsers or devices</li> 147 + <li>Includes user self-service controls</li> 148 + <li>Includes an administration overview</li> 149 + </ul> 150 + </aside> 151 + </div> 153 153 </div> 154 154 </section> 155 155 ... ... @@ -157,27 +157,25 @@ 157 157 <div class="container"> 158 158 <h2 id="capabilities-title">Main capabilities</h2> 159 159 160 - ```161 - <pclass="section-intro">162 - AfocusedsetofMFA features for stronger XWiki account protectionwithout replacing the familiar login experience.163 -</p> 159 + <p class="section-intro"> 160 + A focused set of authentication protection features for stronger XWiki account security 161 + without replacing the familiar login experience. 162 + </p> 164 164 165 -<div class="product-feature-grid"> 166 - #foreach ($entry in $mainCapabilityItems) 167 - <article class="product-feature"> 168 - <div class="card-heading"> 169 - <div class="feature-icon"> 170 - <i class="fa fa-$entry.icon" aria-hidden="true"></i> 171 - </div> 172 - <h3>$entry.title</h3> 173 - </div> 164 + <div class="product-feature-grid"> 165 + #foreach ($entry in $mainCapabilityItems) 166 + <article class="product-feature"> 167 + <div class="card-heading"> 168 + <div class="feature-icon"> 169 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 170 + </div> 171 + <h3>$entry.title</h3> 172 + </div> 174 174 175 - <p>$entry.content</p> 176 - </article> 177 - #end 178 -</div> 179 -``` 180 - 174 + <p>$entry.content</p> 175 + </article> 176 + #end 177 + </div> 181 181 </div> 182 182 </section> 183 183 ... ... @@ -187,33 +187,30 @@ 187 187 <article class="product-summary-card"> 188 188 <h2 id="security-title">Useful for XWiki security and access protection</h2> 189 189 190 -``` 191 - <p> 192 - Many organizations use XWiki to store internal documentation, procedures, operational 193 - knowledge and business-critical information. Adding a second authentication factor helps 194 - reduce the risk of account compromise when a password is exposed or reused. 195 - </p> 187 + <p> 188 + Many organizations use XWiki to store internal documentation, procedures, operational 189 + knowledge and business-critical information. Adding an additional authentication factor helps 190 + reduce the risk of account compromise when a password is exposed or reused. 191 + </p> 196 196 197 - <p> 198 - The extension is especially useful for protecting administrator accounts, remote users, 199 - private knowledge bases and customer or partner portals. 200 - </p> 201 - </article> 193 + <p> 194 + The extension is especially useful for protecting administrator accounts, remote users, 195 + private knowledge bases and customer or partner portals. 196 + </p> 197 + </article> 202 202 203 - <aside class="product-info-card" aria-labelledby="use-cases-title"> 204 - <h3 id="use-cases-title">Typical use cases</h3> 205 - <ul> 206 - <li>Administrator account protection</li> 207 - <li>Internal knowledge base security</li> 208 - <li>Private documentation platforms</li> 209 - <li>Remote user access protection</li> 210 - <li>Customer or partner portals</li> 211 - <li>Security review and NIS 2 readiness initiatives</li> 212 - </ul> 213 - </aside> 214 -</div> 215 -``` 216 - 199 + <aside class="product-info-card" aria-labelledby="use-cases-title"> 200 + <h3 id="use-cases-title">Typical use cases</h3> 201 + <ul> 202 + <li>Administrator account protection</li> 203 + <li>Internal knowledge base security</li> 204 + <li>Private documentation platforms</li> 205 + <li>Remote user access protection</li> 206 + <li>Customer or partner portals</li> 207 + <li>Security review, MFA rollout and compliance readiness</li> 208 + </ul> 209 + </aside> 210 + </div> 217 217 </div> 218 218 </section> 219 219 ... ... @@ -221,26 +221,25 @@ 221 221 <div class="container"> 222 222 <h2 id="admin-experience-title">Administrator configuration and monitoring</h2> 223 223 224 - ```225 - <pclass="section-intro">226 - AdministratorscanconfiguretheMFA policy, definerecovery options andmonitoradoption from the XWiki Administration section.227 -</p> 218 + <p class="section-intro"> 219 + Administrators can configure the policy, define recovery options and monitor adoption 220 + from the XWiki Administration section. 221 + </p> 228 228 229 -<div class="product-feature-grid"> 230 - #foreach ($entry in $adminExperienceItems) 231 - <article class="product-feature"> 232 - <div class="card-heading"> 233 - <div class="feature-icon"> 234 - <i class="fa fa-$entry.icon" aria-hidden="true"></i> 235 - </div> 236 - <h3>$entry.title</h3> 237 - </div> 223 + <div class="product-feature-grid"> 224 + #foreach ($entry in $adminExperienceItems) 225 + <article class="product-feature"> 226 + <div class="card-heading"> 227 + <div class="feature-icon"> 228 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 229 + </div> 230 + <h3>$entry.title</h3> 231 + </div> 238 238 239 - <p>$entry.content</p> 240 - </article> 241 - #end 242 -</div> 243 -``` 233 + <p>$entry.content</p> 234 + </article> 235 + #end 236 + </div> 244 244 245 245 {{/html}} 246 246 ... ... @@ -252,12 +252,9 @@ 252 252 253 253 {{html clean="false"}} 254 254 255 -``` 256 -<p class="product-gallery-caption"> 257 - Administration screens for configuring MFA and reviewing MFA adoption across users. 258 -</p> 259 -``` 260 - 248 + <p class="product-gallery-caption"> 249 + Administration screens for configuring the policy and reviewing adoption across users. 250 + </p> 261 261 </div> 262 262 </section> 263 263 ... ... @@ -265,26 +265,25 @@ 265 265 <div class="container"> 266 266 <h2 id="user-experience-title">User setup and login verification</h2> 267 267 268 - ```269 - <pclass="section-intro">270 - UserscanconfigureMFAfromtheir profile or duringthe enforced setup flow, thenverify future logins withtheirauthenticator app.271 -</p> 258 + <p class="section-intro"> 259 + Users can configure the authenticator app from their profile or during the enforced setup flow, 260 + then verify future logins with a generated code. 261 + </p> 272 272 273 -<div class="product-feature-grid"> 274 - #foreach ($entry in $userExperienceItems) 275 - <article class="product-feature"> 276 - <div class="card-heading"> 277 - <div class="feature-icon"> 278 - <i class="fa fa-$entry.icon" aria-hidden="true"></i> 279 - </div> 280 - <h3>$entry.title</h3> 281 - </div> 263 + <div class="product-feature-grid"> 264 + #foreach ($entry in $userExperienceItems) 265 + <article class="product-feature"> 266 + <div class="card-heading"> 267 + <div class="feature-icon"> 268 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 269 + </div> 270 + <h3>$entry.title</h3> 271 + </div> 282 282 283 - <p>$entry.content</p> 284 - </article> 285 - #end 286 -</div> 287 -``` 273 + <p>$entry.content</p> 274 + </article> 275 + #end 276 + </div> 288 288 289 289 {{/html}} 290 290 ... ... @@ -296,12 +296,9 @@ 296 296 297 297 {{html clean="false"}} 298 298 299 -``` 300 -<p class="product-gallery-caption"> 301 - User setup, enforced MFA configuration and login verification screens. 302 -</p> 303 -``` 304 - 288 + <p class="product-gallery-caption"> 289 + User setup, enforced configuration and login verification screens. 290 + </p> 305 305 </div> 306 306 </section> 307 307 ... ... @@ -309,26 +309,24 @@ 309 309 <div class="container"> 310 310 <h2 id="self-service-title">Recovery codes and trusted devices</h2> 311 311 312 -``` 313 -<p class="section-intro"> 314 - Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 315 -</p> 298 + <p class="section-intro"> 299 + Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 300 + </p> 316 316 317 -<div class="product-feature-grid"> 318 - #foreach ($entry in $selfServiceItems) 319 - <article class="product-feature"> 320 - <div class="card-heading"> 321 - <div class="feature-icon"> 322 - <i class="fa fa-$entry.icon" aria-hidden="true"></i> 323 - </div> 324 - <h3>$entry.title</h3> 325 - </div> 302 + <div class="product-feature-grid"> 303 + #foreach ($entry in $selfServiceItems) 304 + <article class="product-feature"> 305 + <div class="card-heading"> 306 + <div class="feature-icon"> 307 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 308 + </div> 309 + <h3>$entry.title</h3> 310 + </div> 326 326 327 - <p>$entry.content</p> 328 - </article> 329 - #end 330 -</div> 331 -``` 312 + <p>$entry.content</p> 313 + </article> 314 + #end 315 + </div> 332 332 333 333 {{/html}} 334 334 ... ... @@ -342,12 +342,9 @@ 342 342 343 343 {{html clean="false"}} 344 344 345 -``` 346 -<p class="product-gallery-caption"> 347 - User profile screens for recovery codes, trusted devices and MFA self-service management. 348 -</p> 349 -``` 350 - 329 + <p class="product-gallery-caption"> 330 + User profile screens for recovery codes, trusted devices and self-service management. 331 + </p> 351 351 </div> 352 352 </section> 353 353 ... ... @@ -355,26 +355,24 @@ 355 355 <div class="container"> 356 356 <h2 id="admin-support-title">Administrator support and user recovery</h2> 357 357 358 -``` 359 -<p class="section-intro"> 360 - Administrators can help users recover from lost devices or restart MFA setup when needed. 361 -</p> 339 + <p class="section-intro"> 340 + Administrators can help users recover from lost devices or restart setup when needed. 341 + </p> 362 362 363 -<div class="product-feature-grid"> 364 - #foreach ($entry in $adminSupportItems) 365 - <article class="product-feature"> 366 - <div class="card-heading"> 367 - <div class="feature-icon"> 368 - <i class="fa fa-$entry.icon" aria-hidden="true"></i> 369 - </div> 370 - <h3>$entry.title</h3> 371 - </div> 343 + <div class="product-feature-grid"> 344 + #foreach ($entry in $adminSupportItems) 345 + <article class="product-feature"> 346 + <div class="card-heading"> 347 + <div class="feature-icon"> 348 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 349 + </div> 350 + <h3>$entry.title</h3> 351 + </div> 372 372 373 - <p>$entry.content</p> 374 - </article> 375 - #end 376 -</div> 377 -``` 353 + <p>$entry.content</p> 354 + </article> 355 + #end 356 + </div> 378 378 379 379 {{/html}} 380 380 ... ... @@ -384,57 +384,122 @@ 384 384 385 385 {{html clean="false"}} 386 386 387 - ```388 - <pclass="product-gallery-caption">389 - Administratorviewfor checking and resetting a user MFA setup.390 -</ p>391 - ```366 + <p class="product-gallery-caption"> 367 + Administrator view for checking and resetting a user setup. 368 + </p> 369 + </div> 370 +</section> 392 392 372 +<section aria-labelledby="faq-title"> 373 + <div class="container"> 374 + <h2 id="faq-title">Frequently asked questions</h2> 375 + 376 + <p class="section-intro"> 377 + Common questions about how the extension works, how users configure it and how administrators can manage rollout and recovery. 378 + </p> 379 + 380 + <div class="resource-content"> 381 + <details class="resource-faq-item"> 382 + <summary>Does this extension replace the standard XWiki login?</summary> 383 + <p> 384 + No. Users still sign in with their normal XWiki username and password. The extension adds 385 + an additional verification step after the standard login check. 386 + </p> 387 + </details> 388 + 389 + <details class="resource-faq-item"> 390 + <summary>Which verification method is used?</summary> 391 + <p> 392 + Users verify access with time-based codes generated by an authenticator application. 393 + The setup page provides a QR code and a manual setup key. 394 + </p> 395 + </details> 396 + 397 + <details class="resource-faq-item"> 398 + <summary>Can the second verification step be required for all users?</summary> 399 + <p> 400 + Yes. Administrators can make the verification step optional or required for all users 401 + from the XWiki Administration section. 402 + </p> 403 + </details> 404 + 405 + <details class="resource-faq-item"> 406 + <summary>What happens if a user loses access to the authenticator app?</summary> 407 + <p> 408 + Recovery codes can provide backup access when enabled. Administrators can also reset 409 + the user setup so the configuration process can be restarted. 410 + </p> 411 + </details> 412 + 413 + <details class="resource-faq-item"> 414 + <summary>Can trusted browsers or devices be disabled?</summary> 415 + <p> 416 + Yes. Administrators can configure how long trusted devices remain valid. Setting the 417 + trusted-device duration to 0 disables this option. 418 + </p> 419 + </details> 420 + 421 + <details class="resource-faq-item"> 422 + <summary>Is this only a basic 2FA login-code screen?</summary> 423 + <p> 424 + No. The main login mechanism is two-factor authentication, but the application also includes 425 + features needed for a safer organization-wide rollout: enforcement policy, recovery codes, 426 + trusted devices, user self-service, administrator monitoring and administrator reset actions. 427 + </p> 428 + </details> 429 + 430 + <details class="resource-faq-item"> 431 + <summary>Is this enough for compliance on its own?</summary> 432 + <p> 433 + No. This extension provides an important access-protection control, but it should be part 434 + of a broader security and compliance approach that includes permissions, upgrades, 435 + infrastructure, monitoring and operational procedures. 436 + </p> 437 + </details> 438 + </div> 393 393 </div> 394 394 </section> 395 395 396 -<section aria-labelledby="rollout-title"> 442 +<section class="product-section-muted" aria-labelledby="rollout-title"> 397 397 <div class="container"> 398 398 <div class="product-layout"> 399 399 <article class="product-summary-card"> 400 400 <h2 id="rollout-title">Rollout recommendations</h2> 401 401 402 - ```403 - <p>404 - Forasmoothrollout,startwithasmalladministrator or pilotgroupbeforerequiringMFAforeveryone.405 - Thishelpsvalidatetheconfiguration,prepare user communication and reduce support issues.406 - </p> 448 + <p> 449 + For a smooth rollout, start with a small administrator or pilot group before requiring 450 + the additional verification step for everyone. This helps validate the configuration, 451 + prepare user communication and reduce support issues. 452 + </p> 407 407 408 - <ol class="process-list"> 409 - #foreach ($entry in $rolloutItems) 410 - <li> 411 - <strong>$entry.title</strong> 412 - $entry.content 413 - </li> 414 - #end 415 - </ol> 416 - </article> 454 + <ol class="process-list"> 455 + #foreach ($entry in $rolloutItems) 456 + <li> 457 + <strong>$entry.title</strong> 458 + $entry.content 459 + </li> 460 + #end 461 + </ol> 462 + </article> 417 417 418 - <aside class="product-info-card" aria-labelledby="planning-title"> 419 - <h3 id="planning-title">Useful information before installation</h3> 464 + <aside class="product-info-card" aria-labelledby="planning-title"> 465 + <h3 id="planning-title">Useful information before installation</h3> 420 420 421 - <p class="product-card-note"> 422 - These details help evaluate compatibility, rollout scope and configuration options. 423 - </p> 467 + <p class="product-card-note"> 468 + These details help evaluate compatibility, rollout scope and configuration options. 469 + </p> 424 424 425 - <ul> 426 - <li>XWiki version</li> 427 - <li>Single wiki or wiki farm with subwikis</li> 428 - <li>Current authentication setup</li> 429 - <li>Optional or globally required MFA policy</li> 430 - <li>Trusted-device policy</li> 431 - <li>Recovery-code policy</li> 432 - <li>Rollout communication needs</li> 433 - </ul> 434 - </aside> 435 -</div> 436 -``` 437 - 471 + <ul> 472 + <li>XWiki version</li> 473 + <li>Single wiki or wiki farm with subwikis</li> 474 + <li>Current authentication setup</li> 475 + <li>Optional or required rollout policy</li> 476 + <li>Trusted-device policy</li> 477 + <li>Recovery-code policy</li> 478 + <li>Rollout communication needs</li> 479 + </ul> 480 + </aside> 481 + </div> 438 438 </div> 439 439 </section> 440 440 ... ... @@ -443,18 +443,15 @@ 443 443 <div class="cta-panel"> 444 444 <h2 id="cta-title">Interested in using this extension?</h2> 445 445 446 -``` 447 - <p> 448 - Send a short message with your XWiki version, current authentication setup and MFA rollout goal. 449 - </p> 490 + <p> 491 + Send a short message with your XWiki version, current authentication setup and rollout goal. 492 + </p> 450 450 451 - <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 452 -</div> 453 -``` 454 - 494 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 495 + <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 496 + </div> 455 455 </div> 456 456 </section> 457 457 458 458 {{/html}} 459 459 {{/velocity}} 460 -
- mfa-admin-user-management.png
-
- Size
-
... ... @@ -1,1 +1,1 @@ 1 - 26.9 KB1 +90.8 KB - Content
- 2fa-authenticator.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Admin - Size
-
... ... @@ -1,0 +1,1 @@ 1 +1.1 MB - Content