Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Version History

« Previous Version 4 Next »

What is 2-factor authentication?

To add another layer of security, 2FA can be activated in the system.

2FA or 2-factor authentication is a security measure mainly used to log into systems in a secure way.

The user first logs into the system with his username and password and then he gets a second verification request (SMS, Email, or Google authenticator) which provides the user with a code that he needs to enter.

Authentication manners

Once activated, the system is set with a default authentication manner selected by the Admin, but each user can set his preferred authentication manner:

  • Email

  • Google Authenticator

  • SMS (Twilio)

Change from: My menu > Resource information > Default authentication manner

Email

Initial setup

From: My menu > Resource information

  • Select “Email” in the “Default authenticator” field (fig 2)

  • Make sure the login email is set correctly (fig 3). The authentication email will be sent to this email.

Log in with Email authentication

When logging in, after entering the Username and password the 2FA page will prompt and the verification email will be sent to the Login email of the user

The verification code should be entered to gain access to the system (fig 1).

In case of issues, another authentication manner can be selected upon login for this login attempt

Google Authenticator for phone

Initial setup

From: My menu > Resource information

  1. Select “Google Authenticator” in the “Default authenticator” field (fig 1)

  2. Click “Generate google authenticator info” to show your unique QR code (fig 2)

3. Download Google authenticator app to your phone.

Add links to google play and apple store

4. Open the Google Authenticator app and link it to your user

5. Click Scan QR code and scan the code received in step 2.

If scanning is not available to you you can perform the initial setup using the number code received in step 2

Log in with the Google Authenticator app

  1. Open the Google authentication app on your phone to show your code for this login:

2. Log in to OOONA Manager using your username and password:

3. The 2FA page will prompt.

4. Enter the code received on your phone (fig 1)

Google Authenticator for browser

Initial setup

To link your OOONA Manager user to a browser’s Google authenticator, perform the following actions:

  1. Add the Google Authenticator add-on to your browser https://chrome.google.com/webstore/detail/authenticator/bhghoamapcdpbohphigoooaddinpkbai?hl=en

  2. Pin the Authenticator add-on for easy access

  3. Navigate to your Resource info page: My menu > Resource information

  4. Click “Generate google authenticator” info (fig 1)

  5. Click the pinned authenticator icon (fig 2)

  6. Click scan QR code

  7. Scan by dragging with the mouse over your Google authenticator QR code (fig 4)

Log in with a Browser’s Google Authenticator

1. Log in to OOONA Manager using your username and password

2. Click the pinned Google authenticator icon

3. Click the code to copy it

4. Paste the code

SMS (Twilio)

Initial setup TBC

Log in TBC

Initial activation of 2FA in OOONA Manager by System Administrator

Activating 2-factor authentication

2-factor authentication is activated at a system level.

From: Administrator > Web Administrator > Configuration > Security

  1. Switch ON“Enable two-factor authentication” (fig 4)

  2. Select the default authentication manner (fig 5):

    1. Email

    2. SMS (Twilio)

    3. Google Authenticator

All users can independently change the authentication manner to their preferred one out of the three.

Disabling the 2-factor authentication for internal IPs

  • No labels