Changes for page XWiki Two-Factor Authentication
Last modified by Agnease on 2026/05/23 18:56
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Objects (0 modified, 0 added, 1 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 - XWikiTwo-FactorAuthentication| 2FA and MFA for XWiki1 +xwiki-two-factor-authentication - Content
-
... ... @@ -7,7 +7,7 @@ 7 7 <div class="container hero-inner"> 8 8 <div class="hero-kicker"> 9 9 <i class="fa fa-lock" aria-hidden="true"></i> 10 - XWiki 2FAand MFA10 + XWiki security extension 11 11 </div> 12 12 13 13 <h1 id="product-title">XWiki Two-Factor Authentication</h1> ... ... @@ -17,8 +17,8 @@ 17 17 </p> 18 18 19 19 <p class="hero-support"> 20 - Protect XWiki accounts with authenticatorapp codes, email verificationcodes,21 - or a com binedsetuprequiringboth.20 + This extension protects XWiki accounts with an additional verification step after the standard username and password login. 21 + Users can verify access with an authenticator app code or an email-delivered code, while XWiki keeps its familiar login experience. 22 22 </p> 23 23 24 24 <div class="hero-actions"> ... ... @@ -32,22 +32,22 @@ 32 32 <div class="container"> 33 33 <div class="product-layout"> 34 34 <article class="product-summary-card"> 35 - <h2 id="overview-title"> Two-factorauthenticationbuilt into XWiki</h2>35 + <h2 id="overview-title">Stronger login protection for XWiki</h2> 36 36 37 37 <p> 38 - XWiki Two-Factor Authentication adds an additional verification screen after the standard 39 - XWikiusername and password login.It improvesaccount protection without replacingthe40 - familiar XWiki authenticationflow.38 + The XWiki Two-Factor Authentication extension adds an additional verification screen after the standard 39 + username and password login. Users confirm their identity with a time-based one-time code before accessing 40 + the wiki. 41 41 </p> 42 42 43 43 <p> 44 - UserscanverifyaccesswithTOTPcodesgenerated byan authenticator app, withone-time45 - co desdeliveredby email,orwith acombinedsetuprequiring both methods.44 + The extension is designed for organizations that want to improve account security while keeping authentication 45 + close to the standard XWiki login experience. 46 46 </p> 47 47 48 48 <p> 49 - Trustedbrowsers or devices can berememberedfor aconfiguredperiod, reducingrepeated50 - verificationprompts onknown clients while stillrequiringverificationfromnewor untrustedones.49 + It can be useful for internal knowledge bases, intranets, documentation platforms, SOP systems, or other 50 + XWiki environments where access to content and administration should be better protected. 51 51 </p> 52 52 </article> 53 53 ... ... @@ -55,11 +55,11 @@ 55 55 <h3 id="quick-facts-title">Quick facts</h3> 56 56 <ul> 57 57 <li>Works with the standard XWiki login flow</li> 58 - <li> Supports authenticator app codesusingTOTP</li>59 - <li> Supportsemail-deliveredone-timeverificationcodes</li>60 - <li> Can requireappcodeand emailcodetogether</li>61 - <li> Canremembertrustedbrowsers ordevices</li>62 - <li> Includesadministrationanduser setup controls</li>58 + <li>Adds a second TOTP verification step</li> 59 + <li>Configuration available from wiki administration</li> 60 + <li>User setup available during login or from the user profile</li> 61 + <li>Administrators can enable, disable or reset MFA for users</li> 62 + <li>Can be used on the main wiki and subwikis</li> 63 63 </ul> 64 64 </aside> 65 65 </div> ... ... @@ -69,10 +69,9 @@ 69 69 <section aria-labelledby="features-title"> 70 70 <div class="container"> 71 71 <h2 id="features-title">Main capabilities</h2> 72 - 73 73 <p class="section-intro"> 74 - AfocusedsetofMFA/2FAfeaturesfor organizationsthatwant stronger XWikiaccount protection75 - withoutchanging thestandardlogin experience.73 + The extension focuses on adding a practical second authentication step while keeping the standard XWiki login 74 + process and administration experience understandable. 76 76 </p> 77 77 78 78 <div class="product-feature-grid"> ... ... @@ -82,76 +82,88 @@ 82 82 </div> 83 83 <h3>Second login step</h3> 84 84 <p> 85 - After username and password verifi cation, usersmustcomplete anadditionalverificationstep beforeaccessing XWiki.84 + After the username and password are verified, users are asked to enter a time-based verification code. 86 86 </p> 87 87 </article> 88 88 89 89 <article class="product-feature"> 90 90 <div class="feature-icon"> 91 - <i class="fa fa- mobile" aria-hidden="true"></i>90 + <i class="fa fa-qrcode" aria-hidden="true"></i> 92 92 </div> 93 - <h3> Authenticatorappcodes</h3>92 + <h3>User setup screen</h3> 94 94 <p> 95 - Users can verif y access withTOTPcodes generatedbyauthenticatorapplicationson mobileor desktopdevices.94 + Users can configure their verification code setup during login or from their XWiki profile when needed. 96 96 </p> 97 97 </article> 98 98 99 99 <article class="product-feature"> 100 100 <div class="feature-icon"> 101 - <i class="fa fa- envelope-o" aria-hidden="true"></i>100 + <i class="fa fa-sliders" aria-hidden="true"></i> 102 102 </div> 103 - <h3> Email verification codes</h3>102 + <h3>Administration controls</h3> 104 104 <p> 105 - Users canreceive one-timeverification codesbyemail whenanauthenticatorappisnot availableor preferred.104 + Administrators can enable the feature globally, manage user-level activation, and reset a user setup when required. 106 106 </p> 107 107 </article> 108 108 109 109 <article class="product-feature"> 110 110 <div class="feature-icon"> 111 - <i class="fa fa- plus-circle" aria-hidden="true"></i>110 + <i class="fa fa-user" aria-hidden="true"></i> 112 112 </div> 113 - <h3> Combinedverification</h3>112 + <h3>Profile integration</h3> 114 114 <p> 115 - The loginflow canrequirebothanauthenticatorappcodeandanemail codewhenstricterverificationis needed.114 + The extension adds user profile controls so the second-factor setup can be reviewed or reset from XWiki. 116 116 </p> 117 117 </article> 117 + 118 + <article class="product-feature"> 119 + <div class="feature-icon"> 120 + <i class="fa fa-random" aria-hidden="true"></i> 121 + </div> 122 + <h3>Fallback behavior</h3> 123 + <p> 124 + The extension can fall back to standard XWiki authentication when the feature is not enabled or not configured. 125 + </p> 126 + </article> 127 + 128 + <article class="product-feature"> 129 + <div class="feature-icon"> 130 + <i class="fa fa-sitemap" aria-hidden="true"></i> 131 + </div> 132 + <h3>Main wiki and subwikis</h3> 133 + <p> 134 + The extension is designed to support XWiki environments using the main wiki and subwikis. 135 + </p> 136 + </article> 118 118 </div> 119 119 </div> 120 120 </section> 121 121 122 -<section class="product-section-muted"aria-labelledby="security-title">141 +<section aria-labelledby="use-cases-title"> 123 123 <div class="container"> 124 124 <div class="product-layout"> 125 125 <article class="product-summary-card"> 126 - <h2 id="sec urity-title">Usefulfor XWikisecurity and NIS 2 readiness</h2>145 + <h2 id="use-cases-title">When this extension is useful</h2> 127 127 128 128 <p> 129 - Many organizations need multi-factor authentication for enterprise software, including internal 130 - knowledge bases, intranets, documentation platforms and systems containing operational procedures 131 - or sensitive business information. 148 + Two-factor authentication is especially relevant when XWiki contains internal documentation, procedures, 149 + customer information, project knowledge, administrative pages, or business-critical content. 132 132 </p> 133 133 134 134 <p> 135 - For organizations using XWiki, adding two-factor authentication directly to the standard login flow 136 - can help close a practical access-control gap. It can be useful for administrator accounts, remote users, 137 - private knowledge bases and broader security readiness initiatives such as NIS 2 preparation. 153 + It is also useful when many users access the wiki remotely, when administrator accounts need stronger protection, 154 + or when the organization wants to reduce the risk of compromised passwords. 138 138 </p> 139 - 140 - <p> 141 - This extension is not a complete compliance solution on its own, but it can provide an important 142 - technical control for protecting access to XWiki. 143 - </p> 144 144 </article> 145 145 146 - <aside class="product-info-card" aria-labelledby=" security-controls-title">147 - <h3 id=" security-controls-title">Usefulfor</h3>158 + <aside class="product-info-card" aria-labelledby="good-fit-title"> 159 + <h3 id="good-fit-title">Good fit for</h3> 148 148 <ul> 149 - <li>XWiki 2FA rollout</li> 150 - <li>XWiki MFA adoption</li> 151 - <li>Administrator account protection</li> 152 - <li>Remote user access protection</li> 153 - <li>Private knowledge base security</li> 154 - <li>NIS 2 readiness initiatives</li> 161 + <li>Private XWiki knowledge bases</li> 162 + <li>Company intranets</li> 163 + <li>SOP and controlled-document platforms</li> 164 + <li>Documentation portals with sensitive content</li> 165 + <li>Wikis with several administrators or remote users</li> 155 155 </ul> 156 156 </aside> 157 157 </div> ... ... @@ -158,13 +158,30 @@ 158 158 </div> 159 159 </section> 160 160 172 +#* 173 +<section aria-labelledby="gallery-title"> 174 + <div class="container"> 175 + <div class="product-gallery-panel"> 176 + <h2 id="gallery-title">Screenshots</h2> 177 + <p class="gallery-note"> 178 + Use this area to show the login verification screen, first-time setup, user profile controls, 179 + and administration configuration. 180 + </p> 181 + 182 + <div class="product-gallery-placeholder"> 183 + Replace this placeholder with the XWiki gallery macro and 3-5 screenshots from the application. 184 + </div> 185 + </div> 186 + </div> 187 +</section> 188 +*# 161 161 <section class="cta-section" aria-labelledby="cta-title"> 162 162 <div class="container"> 163 163 <div class="cta-panel"> 164 164 <h2 id="cta-title">Interested in using this extension?</h2> 165 165 <p> 166 - Send a short message with your XWiki version, authentication setup, and whether you ne ed167 - authenticator appcodes, emailverificationcodes, combined verification,or trusted-device remembering.194 + Send a short message with your XWiki version, authentication setup, and whether you use a single wiki 195 + or a main wiki with subwikis. 168 168 </p> 169 169 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 170 170 </div>
- Agnease.Code.SEODetailsClass[0]
-
- metaDescription
-
... ... @@ -1,1 +1,0 @@ 1 -Add two-factor authentication to the standard XWiki login flow with authenticator app codes, email verification codes, combined verification, and trusted-device remembering. - metaTitle
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki Two-Factor Authentication | 2FA and MFA for XWiki