...
The user first logs into the system with his their username and password and then he gets they get a second verification request (SMS, Email, or Google authenticator) which provides the user with a code that he needs they need to enter.
The default authentication manner in OOONA Manager is Email.
Authentication manners
| Note |
|---|
Please note that activating 2-factor authentication from Administrator > Web Administrator > Configuration > Security, as explained in the https://ooona.atlassian.net/wiki/spaces/OHC/pages/edit-v2/1833730049#System-Administrator--Initial-activation-of-2FA-in-OOONA-Manager section, it will activate it for all users in the system. To change the authentication manner for individual users, follow the steps bellow. |
The system is set with a default authentication manner set by the Admin, but each user can set his their preferred default authentication manner.
fromFrom: My menu > Resource information > Default authentication manner
...
| Note |
|---|
When the authentication manner is set to “Google authenticator”, and the initial setup wasn’t done by the user yet, on the first login the user will change the authentication manner to Email so he they can log in to OOONA Manager and then he they can perform the initial setup of his their Google authenticator |
...
| Info |
|---|
The Authentication manner can also be changed by the user on every login without presetting a user default |
...
Select “Email” in the “Default authenticator” field (2)
Make sure the login email is set correctly (3). The authentication email will be sent to this email.
Optional: To ensure the data was entered correctly, use the “Test authentication manner” button (4).
...
Log in with Email authentication
When logging in, after entering the Username and password the 2FA page will prompt and the verification email will be sent to the Login email of the user.
...
The verification code received in the mail should be entered to gain access to the system (fig 1).
| Note |
|---|
In case of issues, another authentication manner can be selected upon login for this login attempt |
...
2-factor authentication is activated at a system level by default (fig 4), and can only be turned off by OOONA users.
To change the authentication manner follow these steps:
From: Administrator > Web Administrator > Configuration > Security
Switch ON “Enable two-factor authentication” (fig 4)
Select the default authentication manner (fig 5):
Email
SMS (Twilio)
Google Authenticator (requires initial setup by the user)
...
| Note |
|---|
When the authentication manner is set to “Google authenticator”, and the initial setup wasn’t done by the user yet, on the first login the user will change the authentication manner to Email so he they can log in to OOONA Manager and then he they can perform the initial setup of his their Google authenticator |
...
When activating the 2-factor authentication on a system level, you can also make sure it works as expecting by clicking the “Test authentication manner” button next to the default authentication manner chosen.
...
2-factor authentication for Subcontractor links
2-factor authentication for Subcontractor is activated at a system level by default, and can only be turned off by OOONA users.
All Subcontractor links will require 2-factor authentication when the subcontractors open them.
...
| Info |
|---|
Note that 2-factor authentication for Subcontractor links will automatically send the verification code to the subcontractor email. It does not allow choosing any other authentication method. |
...
Additional authentication methods
If additional security is required, or your company already has an established authentication method, these can also be used to log in to the OOONA Manager system.
Additional authentication methods can be configured from Administrator > Web administrator > Configuration > Security.
...
After selecting an alternative authentication method, the corresponding fields to populate will become available:
...
| Info |
|---|
For security reasons, this configuration by itself will not enable the selected authentication method, as it also requires configuration to be done by the OOONA team. If this configuration is only partially done, the system will fall back to the standard login page. |