Changes for page XWiki Two-Factor Authentication
Last modified by Alex Cotiuga on 2026/07/13 06:59
From version 30.7
edited by Alex Cotiuga
on 2026/07/13 06:59
on 2026/07/13 06:59
Change comment:
There is no comment for this version
To version 22.3
edited by Alex Cotiuga
on 2026/06/24 15:15
on 2026/06/24 15:15
Change comment:
There is no comment for this version
Summary
-
Page properties (3 modified, 0 added, 0 removed)
-
Attachments (1 modified, 0 added, 1 removed)
Details
- Page properties
-
- Default language
-
... ... @@ -1,0 +1,1 @@ 1 +en - Hidden
-
... ... @@ -1,1 +1,1 @@ 1 - true1 +false - Content
-
... ... @@ -1,91 +1,92 @@ 1 1 {{velocity}} 2 2 #set ($discard = $xwiki.ssx.use('PublicWebSite.WebHome')) 3 +#set ($discard = $xwiki.ssx.use('products.WebHome')) 3 3 4 4 #set ($mainCapabilityItems = [{ 5 - 'title': 'Second verification step',6 - 'icon': 'key',7 - 'content': 'Add an additional verification screen after the normal XWiki username and password login.'6 +'title': 'Second verification step', 7 +'icon': 'key', 8 +'content': 'Add an additional verification screen after the normal XWiki username and password login.' 8 8 },{ 9 - 'title': 'Authenticator app codes',10 - 'icon': 'mobile',11 - 'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.'10 +'title': 'Authenticator app codes', 11 +'icon': 'mobile', 12 +'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.' 12 12 },{ 13 - 'title': 'Recovery and trusted devices',14 - 'icon': 'shield',15 - 'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.'14 +'title': 'Recovery and trusted devices', 15 +'icon': 'shield', 16 +'content': 'Provide backup access with recovery codes and reduce repeated prompts on trusted browsers.' 16 16 }]) 17 17 18 18 #set ($adminExperienceItems = [{ 19 - 'title': 'Rolloutpolicy',20 - 'icon': 'cog',21 - 'content': 'Makeadditionalverification optionalat firstor required for all users from the XWiki Administration section.'20 +'title': 'MFA policy', 21 +'icon': 'cog', 22 +'content': 'Make MFA optional or required for all users from the XWiki Administration section.' 22 22 },{ 23 - 'title': 'Configuration options',24 - 'icon': 'sliders',25 - 'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.'24 +'title': 'Configuration options', 25 +'icon': 'sliders', 26 +'content': 'Set the authenticator issuer name, recovery-code count and trusted-device duration.' 26 26 },{ 27 - 'title': 'Administration overview',28 - 'icon': 'table',29 - 'content': 'Review adoption with summary indicators and a filterable Live Data table.'28 +'title': 'Administration overview', 29 +'icon': 'table', 30 +'content': 'Review MFA adoption with summary indicators and a filterable Live Data table.' 30 30 }]) 31 31 32 32 #set ($userExperienceItems = [{ 33 - 'title': 'Self-service setup',34 - 'icon': 'qrcode',35 - 'content': 'Users configurethesecond verification step from their profile by scanning a QR code or entering the setup key manually.'34 +'title': 'Self-service setup', 35 +'icon': 'qrcode', 36 +'content': 'Users configure MFA from their profile by scanning a QR code or entering the setup key manually.' 36 36 },{ 37 - 'title': 'Login verification',38 - 'icon': 'sign-in',39 - 'content': 'After the normal login, users enter theverification code generated by their authenticator app.'38 +'title': 'Login verification', 39 +'icon': 'sign-in', 40 +'content': 'After the normal login, users enter the code generated by their authenticator app.' 40 40 },{ 41 - 'title': 'Trusted browser option',42 - 'icon': 'desktop',43 - 'content': 'Users can trust the current browser for the configured duration after successful verification.'42 +'title': 'Trusted browser option', 43 +'icon': 'desktop', 44 +'content': 'Users can trust the current browser for the configured duration after successful verification.' 44 44 }]) 45 45 46 46 #set ($selfServiceItems = [{ 47 - 'title': 'Recovery codes',48 - 'icon': 'life-ring',49 - 'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.'48 +'title': 'Recovery codes', 49 +'icon': 'life-ring', 50 +'content': 'Recovery codes provide backup access when a user loses access to the authenticator application.' 50 50 },{ 51 - 'title': 'Trusted devices',52 - 'icon': 'desktop',53 - 'content': 'Trusted devices can be reviewed and removed from the user profile.'52 +'title': 'Trusted devices', 53 +'icon': 'desktop', 54 +'content': 'Trusted devices can be reviewed and removed from the user profile.' 54 54 },{ 55 - 'title': 'Profile management',56 - 'icon': 'user',57 - 'content': 'Users can review status, generate recovery codes, manage trusted devices and resettheir setup.'56 +'title': 'Profile management', 57 +'icon': 'user', 58 +'content': 'Users can review MFA status, generate recovery codes, manage trusted devices and reset MFA.' 58 58 }]) 59 59 60 60 #set ($adminSupportItems = [{ 61 - 'title': 'User status',62 - 'icon': 'user',63 - 'content': 'Administrators can open a user profile and check theverificationstatus for that account.'62 +'title': 'User MFA status', 63 +'icon': 'user', 64 +'content': 'Administrators can open a user profile and check the MFA status for that account.' 64 64 },{ 65 - 'title': 'Setupreset',66 - 'icon': 'refresh',67 - 'content': 'Administrators can resetthesetupwhen a user needs to restart the configuration process.'66 +'title': 'MFA reset', 67 +'icon': 'refresh', 68 +'content': 'Administrators can reset MFA when a user needs to restart the configuration process.' 68 68 },{ 69 - 'title': 'Controlled recovery',70 - 'icon': 'unlock-alt',71 - 'content': 'Resettingthesetupremoves the authenticatorconfiguration, recovery codes and trusted devices for that user.'70 +'title': 'Controlled recovery', 71 +'icon': 'unlock-alt', 72 +'content': 'Resetting MFA removes the authenticator setup, recovery codes and trusted devices for that user.' 72 72 }]) 73 73 74 74 #set ($rolloutItems = [{ 75 - 'title': 'Start with a pilot group',76 - 'content': 'Test the extension with administrators or a small user group before enabling it widely.'76 +'title': 'Start with a pilot group', 77 +'content': 'Test the extension with administrators or a small user group before enabling it widely.' 77 77 },{ 78 - 'title': 'Define therolloutpolicy',79 - 'content': 'Decide whetheradditionalverificationshould be optional at first or required for all users.'79 +'title': 'Define the MFA policy', 80 +'content': 'Decide whether MFA should be optional at first or required for all users.' 80 80 },{ 81 - 'title': 'Configure recovery options',82 - 'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.'82 +'title': 'Configure recovery options', 83 +'content': 'Choose the number of recovery codes and whether trusted devices should be allowed.' 83 83 },{ 84 - 'title': 'Inform users',85 - 'content': 'Explain how users configurethe authenticator app, save recovery codes and manage trusted devices.'85 +'title': 'Inform users', 86 +'content': 'Explain how users configure MFA, save recovery codes and manage trusted devices.' 86 86 },{ 87 - 'title': 'Monitor adoption',88 - 'content': 'Use the administration overview to identify users who still need to configureprotection.'88 +'title': 'Monitor adoption', 89 +'content': 'Use the administration overview to identify users who still need to configure MFA.' 89 89 }]) 90 90 91 91 {{html clean="false"}} ... ... @@ -94,26 +94,23 @@ 94 94 <div class="container hero-inner"> 95 95 <div class="hero-kicker"> 96 96 <i class="fa fa-lock" aria-hidden="true"></i> 97 - XWiki 2FA withMFArollout support98 + XWiki 2FA and MFA 98 98 </div> 99 99 100 - <h1 id="product-title">XWiki Two-Factor Authentication</h1> 101 +``` 102 +<h1 id="product-title">XWiki Two-Factor Authentication</h1> 101 101 102 - <p class="lead">103 - Protect XWiki logins with authenticatorappverification,recoverycodes,104 - trusted devicesand administration controls for a safer rollout.105 - </p>104 +<p class="lead"> 105 + Protect XWiki logins with a second verification step using authenticator app codes, 106 + recovery codes and trusted devices. 107 +</p> 106 106 107 - <ulclass="benefits">108 - <li><strong>Extensionfrom€75/year</strong></li>109 - <li><strong>Basicsetupfrom€150</strong></li>110 - <li>MFA rollout support available</li>111 - </ul>109 +<div class="hero-actions"> 110 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 111 + <a class="btn btn-secondary" href="$xwiki.getURL('products.WebHome')">View all products</a> 112 +</div> 113 +``` 112 112 113 - <div class="hero-actions"> 114 - <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 115 - <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 116 - </div> 117 117 </div> 118 118 </section> 119 119 ... ... @@ -123,32 +123,35 @@ 123 123 <article class="product-summary-card"> 124 124 <h2 id="overview-title">Two-factor authentication built into XWiki</h2> 125 125 126 - <p> 127 - XWiki Two-Factor Authentication adds an additional verification step to the standard 128 - XWiki login flow. Users continue to sign in with their normal username and password, 129 - then confirm access with a time-based code from an authenticator application. 130 - </p> 124 +``` 125 + <p> 126 + XWiki Two-Factor Authentication adds MFA support to the standard XWiki login flow. 127 + Users continue to sign in with their normal username and password, then confirm access 128 + with a time-based verification code from an authenticator application. 129 + </p> 131 131 132 - <p>133 - Theapplicationhas evolvedbeyondasimplelogin-codescreen. Itsupportsglobal134 - enforcement, recoverycodes, trusteddevices, userself-service,administrator135 - reset actionsand an overview for monitoringadoption.136 - </p>137 - </article>131 + <p> 132 + The extension is designed for organizations that want stronger access protection for 133 + internal knowledge bases, intranets, documentation platforms, customer portals and other 134 + XWiki-based applications. 135 + </p> 136 + </article> 138 138 139 - <aside class="product-info-card" aria-labelledby="quick-facts-title"> 140 - <h3 id="quick-facts-title">Quick facts</h3> 141 - <ul> 142 - <li>Works with the standard XWiki login flow</li> 143 - <li>Supports TOTP authenticator applications</li> 144 - <li>Can require additional verification for all users</li> 145 - <li>Includes one-time recovery codes</li> 146 - <li>Can remember trusted browsers or devices</li> 147 - <li>Includes user self-service controls</li> 148 - <li>Includes an administration overview</li> 149 - </ul> 150 - </aside> 151 - </div> 138 + <aside class="product-info-card" aria-labelledby="quick-facts-title"> 139 + <h3 id="quick-facts-title">Quick facts</h3> 140 + <ul> 141 + <li>Works with the standard XWiki login flow</li> 142 + <li>Supports TOTP authenticator applications</li> 143 + <li>Can require MFA for all users</li> 144 + <li>Includes one-time recovery codes</li> 145 + <li>Can remember trusted browsers or devices</li> 146 + <li>Includes user self-service controls</li> 147 + <li>Includes an administration overview</li> 148 + </ul> 149 + </aside> 150 +</div> 151 +``` 152 + 152 152 </div> 153 153 </section> 154 154 ... ... @@ -156,25 +156,27 @@ 156 156 <div class="container"> 157 157 <h2 id="capabilities-title">Main capabilities</h2> 158 158 159 - <p class="section-intro">160 - A focusedset of authenticationprotectionfeatures for stronger XWiki account security161 - without replacing the familiar login experience. 162 - </p>160 +``` 161 +<p class="section-intro"> 162 + A focused set of MFA features for stronger XWiki account protection without replacing the familiar login experience. 163 +</p> 163 163 164 - <div class="product-feature-grid">165 - #foreach ($entry in $mainCapabilityItems)166 - <article class="product-feature">167 - <div class="card-heading">168 - <div class="feature-icon">169 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>170 - </div>171 - <h3>$entry.title</h3>172 - </div>165 +<div class="product-feature-grid"> 166 + #foreach ($entry in $mainCapabilityItems) 167 + <article class="product-feature"> 168 + <div class="card-heading"> 169 + <div class="feature-icon"> 170 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 171 + </div> 172 + <h3>$entry.title</h3> 173 + </div> 173 173 174 - <p>$entry.content</p> 175 - </article> 176 - #end 177 - </div> 175 + <p>$entry.content</p> 176 + </article> 177 + #end 178 +</div> 179 +``` 180 + 178 178 </div> 179 179 </section> 180 180 ... ... @@ -184,30 +184,33 @@ 184 184 <article class="product-summary-card"> 185 185 <h2 id="security-title">Useful for XWiki security and access protection</h2> 186 186 187 - <p> 188 - Many organizations use XWiki to store internal documentation, procedures, operational 189 - knowledge and business-critical information. Adding an additional authentication factor helps 190 - reduce the risk of account compromise when a password is exposed or reused. 191 - </p> 190 +``` 191 + <p> 192 + Many organizations use XWiki to store internal documentation, procedures, operational 193 + knowledge and business-critical information. Adding a second authentication factor helps 194 + reduce the risk of account compromise when a password is exposed or reused. 195 + </p> 192 192 193 - <p>194 - The extension is especially useful for protecting administrator accounts, remote users,195 - private knowledge bases and customer or partner portals.196 - </p>197 - </article>197 + <p> 198 + The extension is especially useful for protecting administrator accounts, remote users, 199 + private knowledge bases and customer or partner portals. 200 + </p> 201 + </article> 198 198 199 - <aside class="product-info-card" aria-labelledby="use-cases-title"> 200 - <h3 id="use-cases-title">Typical use cases</h3> 201 - <ul> 202 - <li>Administrator account protection</li> 203 - <li>Internal knowledge base security</li> 204 - <li>Private documentation platforms</li> 205 - <li>Remote user access protection</li> 206 - <li>Customer or partner portals</li> 207 - <li>Security review, MFA rollout and compliance readiness</li> 208 - </ul> 209 - </aside> 210 - </div> 203 + <aside class="product-info-card" aria-labelledby="use-cases-title"> 204 + <h3 id="use-cases-title">Typical use cases</h3> 205 + <ul> 206 + <li>Administrator account protection</li> 207 + <li>Internal knowledge base security</li> 208 + <li>Private documentation platforms</li> 209 + <li>Remote user access protection</li> 210 + <li>Customer or partner portals</li> 211 + <li>Security review and NIS 2 readiness initiatives</li> 212 + </ul> 213 + </aside> 214 +</div> 215 +``` 216 + 211 211 </div> 212 212 </section> 213 213 ... ... @@ -215,25 +215,26 @@ 215 215 <div class="container"> 216 216 <h2 id="admin-experience-title">Administrator configuration and monitoring</h2> 217 217 218 - <p class="section-intro">219 - Administratorscan configurethe policy, define recovery options and monitoradoption220 - from the XWiki Administration section. 221 - </p>224 +``` 225 +<p class="section-intro"> 226 + Administrators can configure the MFA policy, define recovery options and monitor adoption from the XWiki Administration section. 227 +</p> 222 222 223 - <div class="product-feature-grid">224 - #foreach ($entry in $adminExperienceItems)225 - <article class="product-feature">226 - <div class="card-heading">227 - <div class="feature-icon">228 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>229 - </div>230 - <h3>$entry.title</h3>231 - </div>229 +<div class="product-feature-grid"> 230 + #foreach ($entry in $adminExperienceItems) 231 + <article class="product-feature"> 232 + <div class="card-heading"> 233 + <div class="feature-icon"> 234 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 235 + </div> 236 + <h3>$entry.title</h3> 237 + </div> 232 232 233 - <p>$entry.content</p> 234 - </article> 235 - #end 236 - </div> 239 + <p>$entry.content</p> 240 + </article> 241 + #end 242 +</div> 243 +``` 237 237 238 238 {{/html}} 239 239 ... ... @@ -245,9 +245,12 @@ 245 245 246 246 {{html clean="false"}} 247 247 248 - <p class="product-gallery-caption"> 249 - Administration screens for configuring the policy and reviewing adoption across users. 250 - </p> 255 +``` 256 +<p class="product-gallery-caption"> 257 + Administration screens for configuring MFA and reviewing MFA adoption across users. 258 +</p> 259 +``` 260 + 251 251 </div> 252 252 </section> 253 253 ... ... @@ -255,25 +255,26 @@ 255 255 <div class="container"> 256 256 <h2 id="user-experience-title">User setup and login verification</h2> 257 257 258 - <p class="section-intro">259 - Userscan configurethe authenticator app from their profile or duringthe enforced setup flow,260 - then verify future logins with a generatedcode.261 - </p>268 +``` 269 +<p class="section-intro"> 270 + Users can configure MFA from their profile or during the enforced setup flow, then verify future logins with their authenticator app. 271 +</p> 262 262 263 - <div class="product-feature-grid">264 - #foreach ($entry in $userExperienceItems)265 - <article class="product-feature">266 - <div class="card-heading">267 - <div class="feature-icon">268 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>269 - </div>270 - <h3>$entry.title</h3>271 - </div>273 +<div class="product-feature-grid"> 274 + #foreach ($entry in $userExperienceItems) 275 + <article class="product-feature"> 276 + <div class="card-heading"> 277 + <div class="feature-icon"> 278 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 279 + </div> 280 + <h3>$entry.title</h3> 281 + </div> 272 272 273 - <p>$entry.content</p> 274 - </article> 275 - #end 276 - </div> 283 + <p>$entry.content</p> 284 + </article> 285 + #end 286 +</div> 287 +``` 277 277 278 278 {{/html}} 279 279 ... ... @@ -285,9 +285,12 @@ 285 285 286 286 {{html clean="false"}} 287 287 288 - <p class="product-gallery-caption"> 289 - User setup, enforced configuration and login verification screens. 290 - </p> 299 +``` 300 +<p class="product-gallery-caption"> 301 + User setup, enforced MFA configuration and login verification screens. 302 +</p> 303 +``` 304 + 291 291 </div> 292 292 </section> 293 293 ... ... @@ -295,24 +295,26 @@ 295 295 <div class="container"> 296 296 <h2 id="self-service-title">Recovery codes and trusted devices</h2> 297 297 298 - <p class="section-intro"> 299 - Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 300 - </p> 312 +``` 313 +<p class="section-intro"> 314 + Recovery codes and trusted devices help balance stronger access protection with a smoother user experience. 315 +</p> 301 301 302 - <div class="product-feature-grid">303 - #foreach ($entry in $selfServiceItems)304 - <article class="product-feature">305 - <div class="card-heading">306 - <div class="feature-icon">307 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>308 - </div>309 - <h3>$entry.title</h3>310 - </div>317 +<div class="product-feature-grid"> 318 + #foreach ($entry in $selfServiceItems) 319 + <article class="product-feature"> 320 + <div class="card-heading"> 321 + <div class="feature-icon"> 322 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 323 + </div> 324 + <h3>$entry.title</h3> 325 + </div> 311 311 312 - <p>$entry.content</p> 313 - </article> 314 - #end 315 - </div> 327 + <p>$entry.content</p> 328 + </article> 329 + #end 330 +</div> 331 +``` 316 316 317 317 {{/html}} 318 318 ... ... @@ -326,9 +326,12 @@ 326 326 327 327 {{html clean="false"}} 328 328 329 - <p class="product-gallery-caption"> 330 - User profile screens for recovery codes, trusted devices and self-service management. 331 - </p> 345 +``` 346 +<p class="product-gallery-caption"> 347 + User profile screens for recovery codes, trusted devices and MFA self-service management. 348 +</p> 349 +``` 350 + 332 332 </div> 333 333 </section> 334 334 ... ... @@ -336,24 +336,26 @@ 336 336 <div class="container"> 337 337 <h2 id="admin-support-title">Administrator support and user recovery</h2> 338 338 339 - <p class="section-intro"> 340 - Administrators can help users recover from lost devices or restart setup when needed. 341 - </p> 358 +``` 359 +<p class="section-intro"> 360 + Administrators can help users recover from lost devices or restart MFA setup when needed. 361 +</p> 342 342 343 - <div class="product-feature-grid">344 - #foreach ($entry in $adminSupportItems)345 - <article class="product-feature">346 - <div class="card-heading">347 - <div class="feature-icon">348 - <i class="fa fa-$entry.icon" aria-hidden="true"></i>349 - </div>350 - <h3>$entry.title</h3>351 - </div>363 +<div class="product-feature-grid"> 364 + #foreach ($entry in $adminSupportItems) 365 + <article class="product-feature"> 366 + <div class="card-heading"> 367 + <div class="feature-icon"> 368 + <i class="fa fa-$entry.icon" aria-hidden="true"></i> 369 + </div> 370 + <h3>$entry.title</h3> 371 + </div> 352 352 353 - <p>$entry.content</p> 354 - </article> 355 - #end 356 - </div> 373 + <p>$entry.content</p> 374 + </article> 375 + #end 376 +</div> 377 +``` 357 357 358 358 {{/html}} 359 359 ... ... @@ -363,122 +363,57 @@ 363 363 364 364 {{html clean="false"}} 365 365 366 - <p class="product-gallery-caption">367 - Administrator view for checking andresettingausersetup.368 - </p>369 - </div>370 - </section>387 +``` 388 +<p class="product-gallery-caption"> 389 + Administrator view for checking and resetting a user MFA setup. 390 +</p> 391 +``` 371 371 372 -<section aria-labelledby="faq-title"> 373 - <div class="container"> 374 - <h2 id="faq-title">Frequently asked questions</h2> 375 - 376 - <p class="section-intro"> 377 - Common questions about how the extension works, how users configure it and how administrators can manage rollout and recovery. 378 - </p> 379 - 380 - <div class="resource-content"> 381 - <details class="resource-faq-item"> 382 - <summary>Does this extension replace the standard XWiki login?</summary> 383 - <p> 384 - No. Users still sign in with their normal XWiki username and password. The extension adds 385 - an additional verification step after the standard login check. 386 - </p> 387 - </details> 388 - 389 - <details class="resource-faq-item"> 390 - <summary>Which verification method is used?</summary> 391 - <p> 392 - Users verify access with time-based codes generated by an authenticator application. 393 - The setup page provides a QR code and a manual setup key. 394 - </p> 395 - </details> 396 - 397 - <details class="resource-faq-item"> 398 - <summary>Can the second verification step be required for all users?</summary> 399 - <p> 400 - Yes. Administrators can make the verification step optional or required for all users 401 - from the XWiki Administration section. 402 - </p> 403 - </details> 404 - 405 - <details class="resource-faq-item"> 406 - <summary>What happens if a user loses access to the authenticator app?</summary> 407 - <p> 408 - Recovery codes can provide backup access when enabled. Administrators can also reset 409 - the user setup so the configuration process can be restarted. 410 - </p> 411 - </details> 412 - 413 - <details class="resource-faq-item"> 414 - <summary>Can trusted browsers or devices be disabled?</summary> 415 - <p> 416 - Yes. Administrators can configure how long trusted devices remain valid. Setting the 417 - trusted-device duration to 0 disables this option. 418 - </p> 419 - </details> 420 - 421 - <details class="resource-faq-item"> 422 - <summary>Is this only a basic 2FA login-code screen?</summary> 423 - <p> 424 - No. The main login mechanism is two-factor authentication, but the application also includes 425 - features needed for a safer organization-wide rollout: enforcement policy, recovery codes, 426 - trusted devices, user self-service, administrator monitoring and administrator reset actions. 427 - </p> 428 - </details> 429 - 430 - <details class="resource-faq-item"> 431 - <summary>Is this enough for compliance on its own?</summary> 432 - <p> 433 - No. This extension provides an important access-protection control, but it should be part 434 - of a broader security and compliance approach that includes permissions, upgrades, 435 - infrastructure, monitoring and operational procedures. 436 - </p> 437 - </details> 438 - </div> 439 439 </div> 440 440 </section> 441 441 442 -<section class="product-section-muted"aria-labelledby="rollout-title">396 +<section aria-labelledby="rollout-title"> 443 443 <div class="container"> 444 444 <div class="product-layout"> 445 445 <article class="product-summary-card"> 446 446 <h2 id="rollout-title">Rollout recommendations</h2> 447 447 448 - <p>449 - For a smooth rollout, start with a small administrator orpilot group before requiring450 - theadditionalverificationstep for everyone.Thishelpsvalidatethe configuration,451 - prepare user communication and reduce support issues. 452 - </p>402 +``` 403 + <p> 404 + For a smooth rollout, start with a small administrator or pilot group before requiring MFA for everyone. 405 + This helps validate the configuration, prepare user communication and reduce support issues. 406 + </p> 453 453 454 - <ol class="process-list">455 - #foreach ($entry in $rolloutItems)456 - <li>457 - <strong>$entry.title</strong>458 - $entry.content459 - </li>460 - #end461 - </ol>462 - </article>408 + <ol class="process-list"> 409 + #foreach ($entry in $rolloutItems) 410 + <li> 411 + <strong>$entry.title</strong> 412 + $entry.content 413 + </li> 414 + #end 415 + </ol> 416 + </article> 463 463 464 - <aside class="product-info-card" aria-labelledby="planning-title">465 - <h3 id="planning-title">Useful information before installation</h3>418 + <aside class="product-info-card" aria-labelledby="planning-title"> 419 + <h3 id="planning-title">Useful information before installation</h3> 466 466 467 - <p class="product-card-note">468 - These details help evaluate compatibility, rollout scope and configuration options.469 - </p>421 + <p class="product-card-note"> 422 + These details help evaluate compatibility, rollout scope and configuration options. 423 + </p> 470 470 471 - <ul> 472 - <li>XWiki version</li> 473 - <li>Single wiki or wiki farm with subwikis</li> 474 - <li>Current authentication setup</li> 475 - <li>Optional or required rollout policy</li> 476 - <li>Trusted-device policy</li> 477 - <li>Recovery-code policy</li> 478 - <li>Rollout communication needs</li> 479 - </ul> 480 - </aside> 481 - </div> 425 + <ul> 426 + <li>XWiki version</li> 427 + <li>Single wiki or wiki farm with subwikis</li> 428 + <li>Current authentication setup</li> 429 + <li>Optional or globally required MFA policy</li> 430 + <li>Trusted-device policy</li> 431 + <li>Recovery-code policy</li> 432 + <li>Rollout communication needs</li> 433 + </ul> 434 + </aside> 435 +</div> 436 +``` 437 + 482 482 </div> 483 483 </section> 484 484 ... ... @@ -487,15 +487,18 @@ 487 487 <div class="cta-panel"> 488 488 <h2 id="cta-title">Interested in using this extension?</h2> 489 489 490 - <p> 491 - Send a short message with your XWiki version, current authentication setup and rollout goal. 492 - </p> 446 +``` 447 + <p> 448 + Send a short message with your XWiki version, current authentication setup and MFA rollout goal. 449 + </p> 493 493 494 - <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 495 - <a class="btn btn-secondary" href="$xwiki.getURL('pricing.WebHome')#common-packages">View MFA setup price</a> 496 - </div> 451 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 452 +</div> 453 +``` 454 + 497 497 </div> 498 498 </section> 499 499 500 500 {{/html}} 501 501 {{/velocity}} 460 +
- 2fa-authenticator.png
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki.Admin - Size
-
... ... @@ -1,1 +1,0 @@ 1 -1.1 MB - Content
- mfa-admin-user-management.png
-
- Size
-
... ... @@ -1,1 +1,1 @@ 1 - 90.8KB1 +26.9 KB - Content