Changes for page XWiki Two-Factor Authentication
Last modified by Agnease on 2026/05/23 18:56
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Objects (0 modified, 0 added, 1 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 - XWikiTwo-FactorAuthentication1 +xwiki-two-factor-authentication - Content
-
... ... @@ -7,16 +7,20 @@ 7 7 <div class="container hero-inner"> 8 8 <div class="hero-kicker"> 9 9 <i class="fa fa-lock" aria-hidden="true"></i> 10 - XWiki 2FAand MFA10 + XWiki security extension 11 11 </div> 12 12 13 13 <h1 id="product-title">XWiki Two-Factor Authentication</h1> 14 14 15 15 <p class="lead"> 16 - Protect XWiki logins with a second verification step using authenticator app codes, 17 - email verification codes, or both. 16 + Add a second verification step to the standard XWiki login flow. 18 18 </p> 19 19 19 + <p class="hero-support"> 20 + This extension protects XWiki accounts with an additional verification step after the standard username and password login. 21 + Users can verify access with an authenticator app code or an email-delivered code, while XWiki keeps its familiar login experience. 22 + </p> 23 + 20 20 <div class="hero-actions"> 21 21 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 22 22 <a class="btn btn-secondary" href="$xwiki.getURL('products.WebHome')">View all products</a> ... ... @@ -28,22 +28,23 @@ 28 28 <div class="container"> 29 29 <div class="product-layout"> 30 30 <article class="product-summary-card"> 31 - <h2 id="overview-title"> Two-factorauthenticationbuilt into XWiki</h2>35 + <h2 id="overview-title">Stronger login protection for XWiki</h2> 32 32 33 33 <p> 34 - XWiki Two-Factor Authentication adds an additional verification screen after the standard 35 - XWikiusername and password login.It improvesaccount protection withoutreplacingthe36 - familiarXWikiauthenticationflow.38 + The XWiki Two-Factor Authentication extension adds an additional verification screen after the standard 39 + username and password login. Users confirm their identity with a time-based one-time code generated by an 40 + authenticator app, or with a verification code delivered by email. 37 37 </p> 38 38 39 39 <p> 40 - Users can verify access with TOTP codes generated by an authenticator app, with one-time 41 - codes delivered by email, or with a combined setup requiring both methods. 44 + The extension is designed for organizations that want to improve account security while keeping authentication 45 + close to the standard XWiki login experience. It also supports remembering trusted clients beyond the current 46 + session, so users are not forced to enter a second factor again on every login from the same trusted browser. 42 42 </p> 43 43 44 44 <p> 45 - Trustedbrowsers or devices can berememberedfor aconfiguredperiod, reducingrepeated46 - verificationprompts onknown clients while stillrequiringverificationfromnewor untrustedones.50 + It can be useful for internal knowledge bases, intranets, documentation platforms, SOP systems, or other 51 + XWiki environments where access to content and administration should be better protected. 47 47 </p> 48 48 </article> 49 49 ... ... @@ -51,11 +51,11 @@ 51 51 <h3 id="quick-facts-title">Quick facts</h3> 52 52 <ul> 53 53 <li>Works with the standard XWiki login flow</li> 54 - <li> Supports authenticator app codesusingTOTP</li>55 - <li> Supportsemail-deliveredone-timeverificationcodes</li>56 - <li> Can requireappcodeand emailcodetogether</li>57 - <li> Canremembertrustedbrowsers ordevices</li>58 - <li> Includesadministrationanduser setup controls</li>59 + <li>Adds a second TOTP verification step</li> 60 + <li>Configuration available from wiki administration</li> 61 + <li>User setup available during login or from the user profile</li> 62 + <li>Administrators can enable, disable or reset MFA for users</li> 63 + <li>Can be used on the main wiki and subwikis</li> 59 59 </ul> 60 60 </aside> 61 61 </div> ... ... @@ -65,10 +65,9 @@ 65 65 <section aria-labelledby="features-title"> 66 66 <div class="container"> 67 67 <h2 id="features-title">Main capabilities</h2> 68 - 69 69 <p class="section-intro"> 70 - AfocusedsetofMFA/2FAfeaturesfor organizationsthatwant stronger XWikiaccount protection71 - withoutchanging thestandardlogin experience.74 + The extension focuses on adding a practical second authentication step while keeping the standard XWiki login 75 + process and administration experience understandable. 72 72 </p> 73 73 74 74 <div class="product-feature-grid"> ... ... @@ -78,76 +78,88 @@ 78 78 </div> 79 79 <h3>Second login step</h3> 80 80 <p> 81 - After username and password verifi cation, usersmustcomplete anadditionalverificationstep beforeaccessing XWiki.85 + After the username and password are verified, users are asked to enter a time-based verification code. 82 82 </p> 83 83 </article> 84 84 85 85 <article class="product-feature"> 86 86 <div class="feature-icon"> 87 - <i class="fa fa- mobile" aria-hidden="true"></i>91 + <i class="fa fa-qrcode" aria-hidden="true"></i> 88 88 </div> 89 - <h3> Authenticatorappcodes</h3>93 + <h3>User setup screen</h3> 90 90 <p> 91 - Users can verif y access withTOTPcodes generatedbyauthenticatorapplicationson mobileor desktopdevices.95 + Users can configure their verification code setup during login or from their XWiki profile when needed. 92 92 </p> 93 93 </article> 94 94 95 95 <article class="product-feature"> 96 96 <div class="feature-icon"> 97 - <i class="fa fa- envelope-o" aria-hidden="true"></i>101 + <i class="fa fa-sliders" aria-hidden="true"></i> 98 98 </div> 99 - <h3> Email verification codes</h3>103 + <h3>Administration controls</h3> 100 100 <p> 101 - Users canreceive one-timeverification codesbyemail whenanauthenticatorappisnot availableor preferred.105 + Administrators can enable the feature globally, manage user-level activation, and reset a user setup when required. 102 102 </p> 103 103 </article> 104 104 105 105 <article class="product-feature"> 106 106 <div class="feature-icon"> 107 - <i class="fa fa- plus-circle" aria-hidden="true"></i>111 + <i class="fa fa-user" aria-hidden="true"></i> 108 108 </div> 109 - <h3> Combinedverification</h3>113 + <h3>Profile integration</h3> 110 110 <p> 111 - The loginflow canrequirebothanauthenticatorappcodeandanemail codewhenstricterverificationis needed.115 + The extension adds user profile controls so the second-factor setup can be reviewed or reset from XWiki. 112 112 </p> 113 113 </article> 118 + 119 + <article class="product-feature"> 120 + <div class="feature-icon"> 121 + <i class="fa fa-random" aria-hidden="true"></i> 122 + </div> 123 + <h3>Fallback behavior</h3> 124 + <p> 125 + The extension can fall back to standard XWiki authentication when the feature is not enabled or not configured. 126 + </p> 127 + </article> 128 + 129 + <article class="product-feature"> 130 + <div class="feature-icon"> 131 + <i class="fa fa-sitemap" aria-hidden="true"></i> 132 + </div> 133 + <h3>Main wiki and subwikis</h3> 134 + <p> 135 + The extension is designed to support XWiki environments using the main wiki and subwikis. 136 + </p> 137 + </article> 114 114 </div> 115 115 </div> 116 116 </section> 117 117 118 -<section class="product-section-muted"aria-labelledby="security-title">142 +<section aria-labelledby="use-cases-title"> 119 119 <div class="container"> 120 120 <div class="product-layout"> 121 121 <article class="product-summary-card"> 122 - <h2 id="sec urity-title">Usefulfor XWikisecurity and NIS 2 readiness</h2>146 + <h2 id="use-cases-title">When this extension is useful</h2> 123 123 124 124 <p> 125 - Many organizations need multi-factor authentication for enterprise software, including internal 126 - knowledge bases, intranets, documentation platforms and systems containing operational procedures 127 - or sensitive business information. 149 + Two-factor authentication is especially relevant when XWiki contains internal documentation, procedures, 150 + customer information, project knowledge, administrative pages, or business-critical content. 128 128 </p> 129 129 130 130 <p> 131 - For organizations using XWiki, adding two-factor authentication directly to the standard login flow 132 - can help close a practical access-control gap. It can be useful for administrator accounts, remote users, 133 - private knowledge bases and broader security readiness initiatives such as NIS 2 preparation. 154 + It is also useful when many users access the wiki remotely, when administrator accounts need stronger protection, 155 + or when the organization wants to reduce the risk of compromised passwords. 134 134 </p> 135 - 136 - <p> 137 - This extension is not a complete compliance solution on its own, but it can provide an important 138 - technical control for protecting access to XWiki. 139 - </p> 140 140 </article> 141 141 142 - <aside class="product-info-card" aria-labelledby=" security-controls-title">143 - <h3 id=" security-controls-title">Usefulfor</h3>159 + <aside class="product-info-card" aria-labelledby="good-fit-title"> 160 + <h3 id="good-fit-title">Good fit for</h3> 144 144 <ul> 145 - <li>XWiki 2FA rollout</li> 146 - <li>XWiki MFA adoption</li> 147 - <li>Administrator account protection</li> 148 - <li>Remote user access protection</li> 149 - <li>Private knowledge base security</li> 150 - <li>NIS 2 readiness initiatives</li> 162 + <li>Private XWiki knowledge bases</li> 163 + <li>Company intranets</li> 164 + <li>SOP and controlled-document platforms</li> 165 + <li>Documentation portals with sensitive content</li> 166 + <li>Wikis with several administrators or remote users</li> 151 151 </ul> 152 152 </aside> 153 153 </div> ... ... @@ -154,13 +154,30 @@ 154 154 </div> 155 155 </section> 156 156 173 +#* 174 +<section aria-labelledby="gallery-title"> 175 + <div class="container"> 176 + <div class="product-gallery-panel"> 177 + <h2 id="gallery-title">Screenshots</h2> 178 + <p class="gallery-note"> 179 + Use this area to show the login verification screen, first-time setup, user profile controls, 180 + and administration configuration. 181 + </p> 182 + 183 + <div class="product-gallery-placeholder"> 184 + Replace this placeholder with the XWiki gallery macro and 3-5 screenshots from the application. 185 + </div> 186 + </div> 187 + </div> 188 +</section> 189 +*# 157 157 <section class="cta-section" aria-labelledby="cta-title"> 158 158 <div class="container"> 159 159 <div class="cta-panel"> 160 160 <h2 id="cta-title">Interested in using this extension?</h2> 161 161 <p> 162 - Send a short message with your XWiki version, authentication setup, and whether you ne ed163 - authenticator appcodes, emailverificationcodes, combined verification,or trusted-device remembering.195 + Send a short message with your XWiki version, authentication setup, and whether you use a single wiki 196 + or a main wiki with subwikis. 164 164 </p> 165 165 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 166 166 </div>
- Agnease.Code.SEODetailsClass[0]
-
- metaDescription
-
... ... @@ -1,1 +1,0 @@ 1 -Agnease Two-Factor Authentication for XWiki adds a second login verification step with authenticator app codes, email codes, combined verification and trusted-device remembering. - metaTitle
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki Two-Factor Authentication with 2FA and MFA Support | Agnease