Changes for page XWiki Two-Factor Authentication
Last modified by Agnease on 2026/05/23 18:56
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Objects (0 modified, 0 added, 1 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,1 +1,1 @@ 1 - XWikiTwo-FactorAuthentication1 +xwiki-two-factor-authentication - Content
-
... ... @@ -7,16 +7,20 @@ 7 7 <div class="container hero-inner"> 8 8 <div class="hero-kicker"> 9 9 <i class="fa fa-lock" aria-hidden="true"></i> 10 - XWiki 2FAand MFA10 + XWiki security extension 11 11 </div> 12 12 13 13 <h1 id="product-title">XWiki Two-Factor Authentication</h1> 14 14 15 15 <p class="lead"> 16 - Protect XWiki logins with a second verification step using authenticator app codes, 17 - email verification codes, or both. 16 + Add a second verification step to the standard XWiki login flow. 18 18 </p> 19 19 19 + <p class="hero-support"> 20 + This extension protects XWiki accounts with an additional verification step after the standard username and password login. 21 + Users can verify access with an authenticator app code or an email-delivered code, while XWiki keeps its familiar login experience. 22 + </p> 23 + 20 20 <div class="hero-actions"> 21 21 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Ask about this extension</a> 22 22 <a class="btn btn-secondary" href="$xwiki.getURL('products.WebHome')">View all products</a> ... ... @@ -28,22 +28,22 @@ 28 28 <div class="container"> 29 29 <div class="product-layout"> 30 30 <article class="product-summary-card"> 31 - <h2 id="overview-title"> Two-factorauthenticationbuilt into XWiki</h2>35 + <h2 id="overview-title">Stronger login protection for XWiki</h2> 32 32 33 33 <p> 34 - XWiki Two-Factor Authentication adds an additional verification screen after the standard 35 - XWikiusername and password login.It improvesaccount protection without replacingthe36 - familiar XWiki authenticationflow.38 + The XWiki Two-Factor Authentication extension adds an additional verification screen after the standard 39 + username and password login. Users confirm their identity with a time-based one-time code before accessing 40 + the wiki. 37 37 </p> 38 38 39 39 <p> 40 - UserscanverifyaccesswithTOTPcodesgenerated byan authenticator app, withone-time41 - co desdeliveredby email,orwith acombinedsetuprequiring both methods.44 + The extension is designed for organizations that want to improve account security while keeping authentication 45 + close to the standard XWiki login experience. 42 42 </p> 43 43 44 44 <p> 45 - Trustedbrowsers or devices can berememberedfor aconfiguredperiod, reducingrepeated46 - verificationprompts onknown clients while stillrequiringverificationfromnewor untrustedones.49 + It can be useful for internal knowledge bases, intranets, documentation platforms, SOP systems, or other 50 + XWiki environments where access to content and administration should be better protected. 47 47 </p> 48 48 </article> 49 49 ... ... @@ -51,11 +51,11 @@ 51 51 <h3 id="quick-facts-title">Quick facts</h3> 52 52 <ul> 53 53 <li>Works with the standard XWiki login flow</li> 54 - <li> Supports authenticator app codesusingTOTP</li>55 - <li> Supportsemail-deliveredone-timeverificationcodes</li>56 - <li> Can requireappcodeand emailcodetogether</li>57 - <li> Canremembertrustedbrowsers ordevices</li>58 - <li> Includesadministrationanduser setup controls</li>58 + <li>Adds a second TOTP verification step</li> 59 + <li>Configuration available from wiki administration</li> 60 + <li>User setup available during login or from the user profile</li> 61 + <li>Administrators can enable, disable or reset MFA for users</li> 62 + <li>Can be used on the main wiki and subwikis</li> 59 59 </ul> 60 60 </aside> 61 61 </div> ... ... @@ -65,9 +65,9 @@ 65 65 <section aria-labelledby="features-title"> 66 66 <div class="container"> 67 67 <h2 id="features-title">Main capabilities</h2> 68 - 69 69 <p class="section-intro"> 70 - A focused set of MFA/2FA features for stronger XWiki account protection without changing the standard login experience. 73 + The extension focuses on adding a practical second authentication step while keeping the standard XWiki login 74 + process and administration experience understandable. 71 71 </p> 72 72 73 73 <div class="product-feature-grid"> ... ... @@ -75,69 +75,90 @@ 75 75 <div class="feature-icon"> 76 76 <i class="fa fa-key" aria-hidden="true"></i> 77 77 </div> 78 - <h3>Second verification step</h3>82 + <h3>Second login step</h3> 79 79 <p> 80 - After username and password verification, users complete an additional step before accessing XWiki. 81 - The flow can require one verification method or both app and email codes. 84 + After the username and password are verified, users are asked to enter a time-based verification code. 82 82 </p> 83 83 </article> 84 84 85 85 <article class="product-feature"> 86 86 <div class="feature-icon"> 87 - <i class="fa fa- mobile" aria-hidden="true"></i>90 + <i class="fa fa-qrcode" aria-hidden="true"></i> 88 88 </div> 89 - <h3> Authenticatorappcodes</h3>92 + <h3>User setup screen</h3> 90 90 <p> 91 - Users can verif y access withTOTPcodes generatedbyauthenticatorapplicationson mobileor desktopdevices.94 + Users can configure their verification code setup during login or from their XWiki profile when needed. 92 92 </p> 93 93 </article> 94 94 95 95 <article class="product-feature"> 96 96 <div class="feature-icon"> 97 - <i class="fa fa- envelope-o" aria-hidden="true"></i>100 + <i class="fa fa-sliders" aria-hidden="true"></i> 98 98 </div> 99 - <h3> Email verification codes</h3>102 + <h3>Administration controls</h3> 100 100 <p> 101 - Users canreceive one-timeverification codesbyemail whenanauthenticatorappisnot availableor preferred.104 + Administrators can enable the feature globally, manage user-level activation, and reset a user setup when required. 102 102 </p> 103 103 </article> 107 + 108 + <article class="product-feature"> 109 + <div class="feature-icon"> 110 + <i class="fa fa-user" aria-hidden="true"></i> 111 + </div> 112 + <h3>Profile integration</h3> 113 + <p> 114 + The extension adds user profile controls so the second-factor setup can be reviewed or reset from XWiki. 115 + </p> 116 + </article> 117 + 118 + <article class="product-feature"> 119 + <div class="feature-icon"> 120 + <i class="fa fa-random" aria-hidden="true"></i> 121 + </div> 122 + <h3>Fallback behavior</h3> 123 + <p> 124 + The extension can fall back to standard XWiki authentication when the feature is not enabled or not configured. 125 + </p> 126 + </article> 127 + 128 + <article class="product-feature"> 129 + <div class="feature-icon"> 130 + <i class="fa fa-sitemap" aria-hidden="true"></i> 131 + </div> 132 + <h3>Main wiki and subwikis</h3> 133 + <p> 134 + The extension is designed to support XWiki environments using the main wiki and subwikis. 135 + </p> 136 + </article> 104 104 </div> 105 105 </div> 106 106 </section> 107 107 108 -<section class="product-section-muted"aria-labelledby="security-title">141 +<section aria-labelledby="use-cases-title"> 109 109 <div class="container"> 110 110 <div class="product-layout"> 111 111 <article class="product-summary-card"> 112 - <h2 id="sec urity-title">Usefulfor XWikisecurity and NIS 2 readiness</h2>145 + <h2 id="use-cases-title">When this extension is useful</h2> 113 113 114 114 <p> 115 - Many organizations need multi-factor authentication for enterprise software, including internal 116 - knowledge bases, intranets, documentation platforms and systems containing operational procedures 117 - or sensitive business information. 148 + Two-factor authentication is especially relevant when XWiki contains internal documentation, procedures, 149 + customer information, project knowledge, administrative pages, or business-critical content. 118 118 </p> 119 119 120 120 <p> 121 - For organizations using XWiki, adding two-factor authentication directly to the standard login flow 122 - can help close a practical access-control gap. It can be useful for administrator accounts, remote users, 123 - private knowledge bases and broader security readiness initiatives such as NIS 2 preparation. 153 + It is also useful when many users access the wiki remotely, when administrator accounts need stronger protection, 154 + or when the organization wants to reduce the risk of compromised passwords. 124 124 </p> 125 - 126 - <p> 127 - This extension is not a complete compliance solution on its own, but it can provide an important 128 - technical control for protecting access to XWiki. 129 - </p> 130 130 </article> 131 131 132 - <aside class="product-info-card" aria-labelledby=" security-controls-title">133 - <h3 id=" security-controls-title">Usefulfor</h3>158 + <aside class="product-info-card" aria-labelledby="good-fit-title"> 159 + <h3 id="good-fit-title">Good fit for</h3> 134 134 <ul> 135 - <li>XWiki 2FA rollout</li> 136 - <li>XWiki MFA adoption</li> 137 - <li>Administrator account protection</li> 138 - <li>Remote user access protection</li> 139 - <li>Private knowledge base security</li> 140 - <li>NIS 2 readiness initiatives</li> 161 + <li>Private XWiki knowledge bases</li> 162 + <li>Company intranets</li> 163 + <li>SOP and controlled-document platforms</li> 164 + <li>Documentation portals with sensitive content</li> 165 + <li>Wikis with several administrators or remote users</li> 141 141 </ul> 142 142 </aside> 143 143 </div> ... ... @@ -144,13 +144,30 @@ 144 144 </div> 145 145 </section> 146 146 172 +#* 173 +<section aria-labelledby="gallery-title"> 174 + <div class="container"> 175 + <div class="product-gallery-panel"> 176 + <h2 id="gallery-title">Screenshots</h2> 177 + <p class="gallery-note"> 178 + Use this area to show the login verification screen, first-time setup, user profile controls, 179 + and administration configuration. 180 + </p> 181 + 182 + <div class="product-gallery-placeholder"> 183 + Replace this placeholder with the XWiki gallery macro and 3-5 screenshots from the application. 184 + </div> 185 + </div> 186 + </div> 187 +</section> 188 +*# 147 147 <section class="cta-section" aria-labelledby="cta-title"> 148 148 <div class="container"> 149 149 <div class="cta-panel"> 150 150 <h2 id="cta-title">Interested in using this extension?</h2> 151 151 <p> 152 - Send a short message with your XWiki version, authentication setup, and whether you ne ed153 - authenticator appcodes, emailverificationcodes, combined verification,or trusted-device remembering.194 + Send a short message with your XWiki version, authentication setup, and whether you use a single wiki 195 + or a main wiki with subwikis. 154 154 </p> 155 155 <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Contact Agnease</a> 156 156 </div>
- Agnease.Code.SEODetailsClass[0]
-
- metaDescription
-
... ... @@ -1,1 +1,0 @@ 1 -Agnease Two-Factor Authentication for XWiki adds a second login verification step with authenticator app codes, email codes, combined verification and trusted-device remembering. - metaTitle
-
... ... @@ -1,1 +1,0 @@ 1 -XWiki Two-Factor Authentication with 2FA and MFA Support | Agnease