Smartstaff, administrator
4,478
edits
Changes
no edit summary
__TOC__
When using two-factor authentication, each new user is provided with a small, easy-can use Google Authenticator to-use, single-button device for remote use. [[Image:Vascotoken.jpg|link=]] These devices support strong authentication with obtain one-time passwords, calculated from algorithms which are time and/or event-based.
==Definition of "Two-Factor Authentication"==
* Two-Factor Authentication is configured by [[User Role]].
* '''''For roles that have this feature enabled, the use of Two-Factor Authentication becomes mandatory.'''''
# Click on [[Roles & Permissions]] (located on the [[Configuration Menu]] on the left-hand navigation bar)
# Click on the hyperlink for User Roles
# Click the ''Edit'' button next to the role for which you wish to add Two-Factor Authentication
# Select Click on the ''Requires Secure drop-down for the Tow Factor Authentication option. There are a number of options exposed: ::# None::# Time-based One-time Password (TOTP)::# RSA Disconnected Token'' setting.
# Hit Save.
# Use Send Password button on user profile to send them an email with Activation link.
[[Image:EnableTwoFactor.png|link=]]
When the user receives the new password then they navigate to the activation screen. If this setting is enabled, all users in this role the first time the user has had a code generated then the screen should include a '''QR Code''' that can be scanned using Google Authenticator. If the user has an existing QA Code then the user can click a button to generate a new code and re-sync or can proceed to the login page. Users will then be prompted to enter the one-time code generated by their Vasco security token after entering their user name and password. <br />
[[Image:Prompt.png|link=]]