Changes for page XWiki Two-Factor Authentication
Last modified by Alex Cotiuga on 2026/07/13 06:59
From version 30.5
edited by Alex Cotiuga
on 2026/07/13 06:57
on 2026/07/13 06:57
Change comment:
There is no comment for this version
To version 22.4
edited by Alex Cotiuga
on 2026/06/24 15:15
on 2026/06/24 15:15
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
-
Attachments (1 modified, 0 added, 1 removed)
Details
- Page properties
-
- Default language
-
... ... @@ -1,0 +1,1 @@ 1 +en - Hidden
-
... ... @@ -1,1 +1,1 @@ 1 - true1 +false - Content
-
... ... @@ -1,91 +1,92 @@ 1 1 {{velocity}} 2 2 #set ($discard = $xwiki.ssx.use('PublicWebSite.WebHome')) 3 +#set ($discard = $xwiki.ssx.use('products.WebHome')) 3 3 4 4 #set ($mainCapabilityItems = [{ 5 - 'title': 'Second verification step',6 - 'icon': 'key',7 - 'content': 'Add an additional verification screen after the normal XWiki username and password login.'6 +'title': 'Second verification step', 7 +'icon': 'key', 8 +'content': 'Add an additional verification screen after the normal XWiki username and password login.' 8 8 },{ 9 - 'title': 'Authenticator app codes',10 - 'icon': 'mobile',11 - 'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.'10 +'title': 'Authenticator app codes', 11 +'icon': 'mobile', 12 +'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.' 12 12 },{ 13 - 'title': 'Recovery and trusted devices',14 - 'icon': 'shield',15 - 'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.'14 +'title': 'Recovery and trusted devices', 15 +'icon': 'shield', 16 +'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.' 16 16 }]) 17 17 18 18 #set ($adminExperienceItems = [{ 19 - 'title': 'Rolloutpolicy',20 - 'icon': 'cog',21 - 'content': 'Makeadditionalverification optionalat firstor required for all users from the XWiki Administration section.'20 +'title': 'MFA policy', 21 +'icon': 'cog', 22 +'content': 'Make MFA optional or required for all users from the XWiki Administration section.' 22 22 },{ 23 - 'title': 'Configuration options',24 - 'icon': 'sliders',25 - 'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.'24 +'title': 'Configuration options', 25 +'icon': 'sliders', 26 +'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.' 26 26 },{ 27 - 'title': 'Administration overview',28 - 'icon': 'table',29 - 'content': 'Review adoption with summary indicators and a filterable Live Data table.'28 +'title': 'Administration overview', 29 +'icon': 'table', 30 +'content': 'Review MFA adoption with summary indicators and a filterable Live Data table.' 30 30 }]) 31 31 32 32 #set ($userExperienceItems = [{ 33 - 'title': 'Self-service setup',34 - 'icon': 'qrcode',35 - 'content': 'Users configurethesecond verification step from their profile by scanning a QR code or entering the setup key manually.'34 +'title': 'Self-service setup', 35 +'icon': 'qrcode', 36 +'content': 'Users configure MFA from their profile by scanning a QR code or entering the setup key manually.' 36 36 },{ 37 - 'title': 'Login verification',38 - 'icon': 'sign-in',39 - 'content': 'After the normal login, users enter theverification code generated by their authenticator app.'38 +'title': 'Login verification', 39 +'icon': 'sign-in', 40 +'content': 'After the normal login, users enter the code generated by their authenticator app.' 40 40 },{ 41 - 'title': 'Trusted browser option',42 - 'icon': 'desktop',43 - 'content': 'Users can trust the current browser for the configured duration after successful verification.'42 +'title': 'Trusted browser option', 43 +'icon': 'desktop', 44 +'content': 'Users can trust the current browser for the configured duration after successful verification.' 44 44 }]) 45 45 46 46 #set ($selfServiceItems = [{ 47 - 'title': 'Recovery codes',48 - 'icon': 'life-ring',49 - 'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.'48 +'title': 'Recovery codes', 49 +'icon': 'life-ring', 50 +'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.' 50 50 },{ 51 - 'title': 'Trusted devices',52 - 'icon': 'desktop',53 - 'content': 'Trusted devices can be reviewed and removed from the user profile.'52 +'title': 'Trusted devices', 53 +'icon': 'desktop', 54 +'content': 'Trusted devices can be reviewed and removed from the user profile.' 54 54 },{ 55 - 'title': 'Profile management',56 - 'icon': 'user',57 - 'content': 'Users can review status, generate recovery codes, manage trusted devices and resettheir setup.'56 +'title': 'Profile management', 57 +'icon': 'user', 58 +'content': 'Users can review MFA status, generate recovery codes, manage trusted devices and reset MFA.' 58 58 }]) 59 59 60 60 #set ($adminSupportItems = [{ 61 - 'title': 'User status',62 - 'icon': 'user',63 - 'content': 'Administrators can open a user profile and check theverificationstatus for that account.'62 +'title': 'User MFA status', 63 +'icon': 'user', 64 +'content': 'Administrators can open a user profile and check the MFA status for that account.' 64 64 },{ 65 - 'title': 'Setupreset',66 - 'icon': 'refresh',67 - 'content': 'Administrators can resetthesetupwhen a user needs to restart the configuration process.'66 +'title': 'MFA reset', 67 +'icon': 'refresh', 68 +'content': 'Administrators can reset MFA when a user needs to restart the configuration process.' 68 68 },{ 69 - 'title': 'Controlled recovery',70 - 'icon': 'unlock-alt',71 - 'content': 'Resettingthesetupremoves the authenticatorconfiguration, recovery codes and trusted devices for that user.'70 +'title': 'Controlled recovery', 71 +'icon': 'unlock-alt', 72 +'content': 'Resetting MFA removes the authenticator setup, recovery codes and trusted devices for that user.' 72 72 }]) 73 73 74 74 #set ($rolloutItems = [{ 75 - 'title': 'Start with a pilot group',76 - 'content': 'Test the extension with administrators or a small user group before enabling it widely.'76 +'title': 'Start with a pilot group', 77 +'content': 'Test the extension with administrators or a small user group before enabling it widely.' 77 77 },{ 78 - 'title': 'Define therolloutpolicy',79 - 'content': 'Decide whetheradditionalverificationshould be optional at first or required for all users.'79 +'title': 'Define the MFA policy', 80 +'content': 'Decide whether MFA should be optional at first or required for all users.' 80 80 },{ 81 - 'title': 'Configure recovery options',82 - 'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.'82 +'title': 'Configure recovery options', 83 +'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.' 83 83 },{ 84 - 'title': 'Inform users',85 - 'content': 'Explain how users configurethe authenticator app, save recovery codes and manage trusted devices.'85 +'title': 'Inform users', 86 +'content': 'Explain how users configure MFA, save recovery codes and manage trusted devices.' 86 86 },{ 87 - 'title': 'Monitor adoption',88 - 'content': 'Use the administration overview to identify users who still need to configureprotection.'88 +'title': 'Monitor adoption', 89 +'content': 'Use the administration overview to identify users who still need to configure MFA.' 89 89 }]) 90 90 91 91 {{html clean="false"}} ... ... @@ -94,25 +94,23 @@ 94 94 <div class="container hero-inner"> 95 95 <div class="hero-kicker"> 96 96 <i class="fa fa-lock" aria-hidden="true"></i> 97 - XWiki 2FA withMFArollout support98 + XWiki 2FA and MFA 98 98 </div> 99 99 100 - <h1 id="product-title">XWiki Two-Factor Authentication</h1> 101 +``` 102 +<h1 id="product-title">XWiki Two-Factor Authentication</h1> 101 101 102 - <p class="lead">103 - Protect XWiki logins with authenticatorappverification,recoverycodes,104 - trusted devicesand administration controls for a safer rollout.105 - </p>104 +<p class="lead"> 105 + Protect XWiki logins with a second verification step using authenticator app codes, 106 + recovery codes and trusted devices. 107 +</p> 106 106 107 - <div class="product-card-kicker"> 108 - <i class="fa fa-tag" aria-hidden="true"></i> 109 - Extension from €95/year · Basic setup from €150 110 - </div> 109 +<div class="hero-actions"> 110 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 111 + <a class="btn btn-secondary" href="$xwiki.getURL('products.WebHome')">View all products</a> 112 +</div> 113 +``` 111 111 112 - <div class="hero-actions"> 113 - <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 114 - <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 115 - </div> 116 116 </div> 117 117 </section> 118 118 ... ... @@ -122,32 +122,35 @@ 122 122 <article class="product-summary-card"> 123 123 <h2 id="overview-title">Two-factor authentication built into XWiki</h2> 124 124 125 - <p> 126 - XWiki Two-Factor Authentication adds an additional verification step to the standard 127 - XWiki login flow. Users continue to sign in with their normal username and password, 128 - then confirm access with a time-based code from an authenticator application. 129 - </p> 124 +``` 125 + <p> 126 + XWiki Two-Factor Authentication adds MFA support to the standard XWiki login flow. 127 + Users continue to sign in with their normal username and password, then confirm access 128 + with a time-based verification code from an authenticator application. 129 + </p> 130 130 131 - <p>132 - Theapplicationhas evolvedbeyondasimplelogin-codescreen. Itsupportsglobal133 - enforcement, recoverycodes, trusteddevices, userself-service,administrator134 - reset actionsand an overview for monitoringadoption.135 - </p>136 - </article>131 + <p> 132 + The extension is designed for organizations that want stronger access protection for 133 + internal knowledge bases, intranets, documentation platforms, customer portals and other 134 + XWiki-based applications. 135 + </p> 136 + </article> 137 137 138 - <aside class="product-info-card" aria-labelledby="quick-facts-title"> 139 - <h3 id="quick-facts-title">Quick facts</h3> 140 - <ul> 141 - <li>Works with the standard XWiki login flow</li> 142 - <li>Supports TOTP authenticator applications</li> 143 - <li>Can require additional verification for all users</li> 144 - <li>Includes one-time recovery codes</li> 145 - <li>Can remember trusted browsers or devices</li> 146 - <li>Includes user self-service controls</li> 147 - <li>Includes an administration overview</li> 148 - </ul> 149 - </aside> 150 - </div> 138 + <aside class="product-info-card" aria-labelledby="quick-facts-title"> 139 + <h3 id="quick-facts-title">Quick facts</h3> 140 + <ul> 141 + <li>Works with the standard XWiki login flow</li> 142 + <li>Supports TOTP authenticator applications</li> 143 + <li>Can require MFA for all users</li> 144 + <li>Includes one-time recovery codes</li> 145 + <li>Can remember trusted browsers or devices</li> 146 + <li>Includes user self-service controls</li> 147 + <li>Includes an administration overview</li> 148 + </ul> 149 + </aside> 150 +</div> 151 +``` 152 + 151 151 </div> 152 152 </section> 153 153 ... ... @@ -155,25 +155,27 @@ 155 155 <div class="container"> 156 156 <h2 id="capabilities-title">Main capabilities</h2> 157 157 158 - <p class="section-intro">159 - A focusedset of authenticationprotectionfeatures for stronger XWiki account security160 - without replacing the familiar login experience. 161 - </p>160 +``` 161 +<p class="section-intro"> 162 + A focused set of MFA features for stronger XWiki account protection without replacing the familiar login experience. 163 +</p> 162 162 163 - <div class="product-feature-grid">164 - #foreach ($entry in $mainCapabilityItems)165 - <article class="product-feature">166 - <div class="card-heading">167 - <div class="feature-icon">168 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>169 - </div>170 - <h3>$entry.title</h3>171 - </div>165 +<div class="product-feature-grid"> 166 + #foreach ($entry in $mainCapabilityItems) 167 + <article class="product-feature"> 168 + <div class="card-heading"> 169 + <div class="feature-icon"> 170 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 171 + </div> 172 + <h3>$entry.title</h3> 173 + </div> 172 172 173 - <p>$entry.content</p> 174 - </article> 175 - #end 176 - </div> 175 + <p>$entry.content</p> 176 + </article> 177 + #end 178 +</div> 179 +``` 180 + 177 177 </div> 178 178 </section> 179 179 ... ... @@ -183,30 +183,33 @@ 183 183 <article class="product-summary-card"> 184 184 <h2 id="security-title">Useful for XWiki security and access protection</h2> 185 185 186 - <p> 187 - Many organizations use XWiki to store internal documentation, procedures, operational 188 - knowledge and business-critical information. Adding an additional authentication factor helps 189 - reduce the risk of account compromise when a password is exposed or reused. 190 - </p> 190 +``` 191 + <p> 192 + Many organizations use XWiki to store internal documentation, procedures, operational 193 + knowledge and business-critical information. Adding a second authentication factor helps 194 + reduce the risk of account compromise when a password is exposed or reused. 195 + </p> 191 191 192 - <p>193 - The extension is especially useful for protecting administrator accounts, remote users,194 - private knowledge bases and customer or partner portals.195 - </p>196 - </article>197 + <p> 198 + The extension is especially useful for protecting administrator accounts, remote users, 199 + private knowledge bases and customer or partner portals. 200 + </p> 201 + </article> 197 197 198 - <aside class="product-info-card" aria-labelledby="use-cases-title"> 199 - <h3 id="use-cases-title">Typical use cases</h3> 200 - <ul> 201 - <li>Administrator account protection</li> 202 - <li>Internal knowledge base security</li> 203 - <li>Private documentation platforms</li> 204 - <li>Remote user access protection</li> 205 - <li>Customer or partner portals</li> 206 - <li>Security review, MFA rollout and compliance readiness</li> 207 - </ul> 208 - </aside> 209 - </div> 203 + <aside class="product-info-card" aria-labelledby="use-cases-title"> 204 + <h3 id="use-cases-title">Typical use cases</h3> 205 + <ul> 206 + <li>Administrator account protection</li> 207 + <li>Internal knowledge base security</li> 208 + <li>Private documentation platforms</li> 209 + <li>Remote user access protection</li> 210 + <li>Customer or partner portals</li> 211 + <li>Security review and NIS 2 readiness initiatives</li> 212 + </ul> 213 + </aside> 214 +</div> 215 +``` 216 + 210 210 </div> 211 211 </section> 212 212 ... ... @@ -214,25 +214,26 @@ 214 214 <div class="container"> 215 215 <h2 id="admin-experience-title">Administrator configuration and monitoring</h2> 216 216 217 - <p class="section-intro">218 - Administratorscan configurethe policy, define recovery options and monitoradoption219 - from the XWiki Administration section. 220 - </p>224 +``` 225 +<p class="section-intro"> 226 + Administrators can configure the MFA policy, define recovery options and monitor adoption from the XWiki Administration section. 227 +</p> 221 221 222 - <div class="product-feature-grid">223 - #foreach ($entry in $adminExperienceItems)224 - <article class="product-feature">225 - <div class="card-heading">226 - <div class="feature-icon">227 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>228 - </div>229 - <h3>$entry.title</h3>230 - </div>229 +<div class="product-feature-grid"> 230 + #foreach ($entry in $adminExperienceItems) 231 + <article class="product-feature"> 232 + <div class="card-heading"> 233 + <div class="feature-icon"> 234 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 235 + </div> 236 + <h3>$entry.title</h3> 237 + </div> 231 231 232 - <p>$entry.content</p> 233 - </article> 234 - #end 235 - </div> 239 + <p>$entry.content</p> 240 + </article> 241 + #end 242 +</div> 243 +``` 236 236 237 237 {{/html}} 238 238 ... ... @@ -244,9 +244,12 @@ 244 244 245 245 {{html clean="false"}} 246 246 247 - <p class="product-gallery-caption"> 248 - Administration screens for configuring the policy and reviewing adoption across users. 249 - </p> 255 +``` 256 +<p class="product-gallery-caption"> 257 + Administration screens for configuring MFA and reviewing MFA adoption across users. 258 +</p> 259 +``` 260 + 250 250 </div> 251 251 </section> 252 252 ... ... @@ -254,25 +254,26 @@ 254 254 <div class="container"> 255 255 <h2 id="user-experience-title">User setup and login verification</h2> 256 256 257 - <p class="section-intro">258 - Userscan configurethe authenticator app from their profile or duringthe enforced setup flow,259 - then verify future logins with a generatedcode.260 - </p>268 +``` 269 +<p class="section-intro"> 270 + Users can configure MFA from their profile or during the enforced setup flow, then verify future logins with their authenticator app. 271 +</p> 261 261 262 - <div class="product-feature-grid">263 - #foreach ($entry in $userExperienceItems)264 - <article class="product-feature">265 - <div class="card-heading">266 - <div class="feature-icon">267 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>268 - </div>269 - <h3>$entry.title</h3>270 - </div>273 +<div class="product-feature-grid"> 274 + #foreach ($entry in $userExperienceItems) 275 + <article class="product-feature"> 276 + <div class="card-heading"> 277 + <div class="feature-icon"> 278 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 279 + </div> 280 + <h3>$entry.title</h3> 281 + </div> 271 271 272 - <p>$entry.content</p> 273 - </article> 274 - #end 275 - </div> 283 + <p>$entry.content</p> 284 + </article> 285 + #end 286 +</div> 287 +``` 276 276 277 277 {{/html}} 278 278 ... ... @@ -284,9 +284,12 @@ 284 284 285 285 {{html clean="false"}} 286 286 287 - <p class="product-gallery-caption"> 288 - User setup, enforced configuration and login verification screens. 289 - </p> 299 +``` 300 +<p class="product-gallery-caption"> 301 + User setup, enforced MFA configuration and login verification screens. 302 +</p> 303 +``` 304 + 290 290 </div> 291 291 </section> 292 292 ... ... @@ -294,24 +294,26 @@ 294 294 <div class="container"> 295 295 <h2 id="self-service-title">Recovery codes and trusted devices</h2> 296 296 297 - <p class="section-intro"> 298 - Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 299 - </p> 312 +``` 313 +<p class="section-intro"> 314 + Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 315 +</p> 300 300 301 - <div class="product-feature-grid">302 - #foreach ($entry in $selfServiceItems)303 - <article class="product-feature">304 - <div class="card-heading">305 - <div class="feature-icon">306 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>307 - </div>308 - <h3>$entry.title</h3>309 - </div>317 +<div class="product-feature-grid"> 318 + #foreach ($entry in $selfServiceItems) 319 + <article class="product-feature"> 320 + <div class="card-heading"> 321 + <div class="feature-icon"> 322 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 323 + </div> 324 + <h3>$entry.title</h3> 325 + </div> 310 310 311 - <p>$entry.content</p> 312 - </article> 313 - #end 314 - </div> 327 + <p>$entry.content</p> 328 + </article> 329 + #end 330 +</div> 331 +``` 315 315 316 316 {{/html}} 317 317 ... ... @@ -325,9 +325,12 @@ 325 325 326 326 {{html clean="false"}} 327 327 328 - <p class="product-gallery-caption"> 329 - User profile screens for recovery codes, trusted devices and self-service management. 330 - </p> 345 +``` 346 +<p class="product-gallery-caption"> 347 + User profile screens for recovery codes, trusted devices and MFA self-service management. 348 +</p> 349 +``` 350 + 331 331 </div> 332 332 </section> 333 333 ... ... @@ -335,24 +335,26 @@ 335 335 <div class="container"> 336 336 <h2 id="admin-support-title">Administrator support and user recovery</h2> 337 337 338 - <p class="section-intro"> 339 - Administrators can help users recover from lost devices or restart setup when needed. 340 - </p> 358 +``` 359 +<p class="section-intro"> 360 + Administrators can help users recover from lost devices or restart MFA setup when needed. 361 +</p> 341 341 342 - <div class="product-feature-grid">343 - #foreach ($entry in $adminSupportItems)344 - <article class="product-feature">345 - <div class="card-heading">346 - <div class="feature-icon">347 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>348 - </div>349 - <h3>$entry.title</h3>350 - </div>363 +<div class="product-feature-grid"> 364 + #foreach ($entry in $adminSupportItems) 365 + <article class="product-feature"> 366 + <div class="card-heading"> 367 + <div class="feature-icon"> 368 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 369 + </div> 370 + <h3>$entry.title</h3> 371 + </div> 351 351 352 - <p>$entry.content</p> 353 - </article> 354 - #end 355 - </div> 373 + <p>$entry.content</p> 374 + </article> 375 + #end 376 +</div> 377 +``` 356 356 357 357 {{/html}} 358 358 ... ... @@ -362,122 +362,57 @@ 362 362 363 363 {{html clean="false"}} 364 364 365 - <p class="product-gallery-caption">366 - Administrator view for checking andresettingausersetup.367 - </p>368 - </div>369 - </section>387 +``` 388 +<p class="product-gallery-caption"> 389 + Administrator view for checking and resetting a user MFA setup. 390 +</p> 391 +``` 370 370 371 -<section aria-labelledby="faq-title"> 372 - <div class="container"> 373 - <h2 id="faq-title">Frequently asked questions</h2> 374 - 375 - <p class="section-intro"> 376 - Common questions about how the extension works, how users configure it and how administrators can manage rollout and recovery. 377 - </p> 378 - 379 - <div class="resource-content"> 380 - <details class="resource-faq-item"> 381 - <summary>Does this extension replace the standard XWiki login?</summary> 382 - <p> 383 - No. Users still sign in with their normal XWiki username and password. The extension adds 384 - an additional verification step after the standard login check. 385 - </p> 386 - </details> 387 - 388 - <details class="resource-faq-item"> 389 - <summary>Which verification method is used?</summary> 390 - <p> 391 - Users verify access with time-based codes generated by an authenticator application. 392 - The setup page provides a QR code and a manual setup key. 393 - </p> 394 - </details> 395 - 396 - <details class="resource-faq-item"> 397 - <summary>Can the second verification step be required for all users?</summary> 398 - <p> 399 - Yes. Administrators can make the verification step optional or required for all users 400 - from the XWiki Administration section. 401 - </p> 402 - </details> 403 - 404 - <details class="resource-faq-item"> 405 - <summary>What happens if a user loses access to the authenticator app?</summary> 406 - <p> 407 - Recovery codes can provide backup access when enabled. Administrators can also reset 408 - the user setup so the configuration process can be restarted. 409 - </p> 410 - </details> 411 - 412 - <details class="resource-faq-item"> 413 - <summary>Can trusted browsers or devices be disabled?</summary> 414 - <p> 415 - Yes. Administrators can configure how long trusted devices remain valid. Setting the 416 - trusted-device duration to 0 disables this option. 417 - </p> 418 - </details> 419 - 420 - <details class="resource-faq-item"> 421 - <summary>Is this only a basic 2FA login-code screen?</summary> 422 - <p> 423 - No. The main login mechanism is two-factor authentication, but the application also includes 424 - features needed for a safer organization-wide rollout: enforcement policy, recovery codes, 425 - trusted devices, user self-service, administrator monitoring and administrator reset actions. 426 - </p> 427 - </details> 428 - 429 - <details class="resource-faq-item"> 430 - <summary>Is this enough for compliance on its own?</summary> 431 - <p> 432 - No. This extension provides an important access-protection control, but it should be part 433 - of a broader security and compliance approach that includes permissions, upgrades, 434 - infrastructure, monitoring and operational procedures. 435 - </p> 436 - </details> 437 - </div> 438 438 </div> 439 439 </section> 440 440 441 -<section class="product-section-muted"aria-labelledby="rollout-title">396 +<section aria-labelledby="rollout-title"> 442 442 <div class="container"> 443 443 <div class="product-layout"> 444 444 <article class="product-summary-card"> 445 445 <h2 id="rollout-title">Rollout recommendations</h2> 446 446 447 - <p>448 - For a smooth rollout, start with a small administrator orpilot group before requiring449 - theadditionalverificationstep for everyone.Thishelpsvalidatethe configuration,450 - prepare user communication and reduce support issues. 451 - </p>402 +``` 403 + <p> 404 + For a smooth rollout, start with a small administrator or pilot group before requiring MFA for everyone. 405 + This helps validate the configuration, prepare user communication and reduce support issues. 406 + </p> 452 452 453 - <ol class="process-list">454 - #foreach ($entry in $rolloutItems)455 - <li>456 - <strong>$entry.title</strong>457 - $entry.content458 - </li>459 - #end460 - </ol>461 - </article>408 + <ol class="process-list"> 409 + #foreach ($entry in $rolloutItems) 410 + <li> 411 + <strong>$entry.title</strong> 412 + $entry.content 413 + </li> 414 + #end 415 + </ol> 416 + </article> 462 462 463 - <aside class="product-info-card" aria-labelledby="planning-title">464 - <h3 id="planning-title">Useful information before installation</h3>418 + <aside class="product-info-card" aria-labelledby="planning-title"> 419 + <h3 id="planning-title">Useful information before installation</h3> 465 465 466 - <p class="product-card-note">467 - These details help evaluate compatibility, rollout scope and configuration options.468 - </p>421 + <p class="product-card-note"> 422 + These details help evaluate compatibility, rollout scope and configuration options. 423 + </p> 469 469 470 - <ul> 471 - <li>XWiki version</li> 472 - <li>Single wiki or wiki farm with subwikis</li> 473 - <li>Current authentication setup</li> 474 - <li>Optional or required rollout policy</li> 475 - <li>Trusted-device policy</li> 476 - <li>Recovery-code policy</li> 477 - <li>Rollout communication needs</li> 478 - </ul> 479 - </aside> 480 - </div> 425 + <ul> 426 + <li>XWiki version</li> 427 + <li>Single wiki or wiki farm with subwikis</li> 428 + <li>Current authentication setup</li> 429 + <li>Optional or globally required MFA policy</li> 430 + <li>Trusted-device policy</li> 431 + <li>Recovery-code policy</li> 432 + <li>Rollout communication needs</li> 433 + </ul> 434 + </aside> 435 +</div> 436 +``` 437 + 481 481 </div> 482 482 </section> 483 483 ... ... @@ -486,13 +486,15 @@ 486 486 <div class="cta-panel"> 487 487 <h2 id="cta-title">Interested in using this extension?</h2> 488 488 489 - <p> 490 - Send a short message with your XWiki version, current authentication setup and rollout goal. 491 - </p> 446 +``` 447 + <p> 448 + Send a short message with your XWiki version, current authentication setup and MFA rollout goal. 449 + </p> 492 492 493 - <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 494 - <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 495 - </div> 451 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 452 +</div> 453 +``` 454 + 496 496 </div> 497 497 </section> 498 498
- 2fa-authenticator.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Admin - Size
-
... ... @@ -1,1 +1,0 @@ 1 -1.1 MB - Content
- mfa-admin-user-management.png
-
- Size
-
... ... @@ -1,1 +1,1 @@ 1 - 90.8KB1 +26.9 KB - Content