Overview
| Info |
|---|
At present, two-factor authentication is not applied globally to all Users but is optionally set up for Users. |
| Excerpt | ||
|---|---|---|
| ||
As an extra layer of security, two-factor authentication has been implemented for CMS User loginlogins. If set up , this means that for a User is , they are required to enter their password and verify the login through an additional application such as Google Authenticator or Duotheir login by entering a PIN (passcode) generated by an authenticator app. |
As an extra layer of security, two-factor authentication has been implemented is now available for CMS . It is designed to ensure that the User logging into the CMS is the person who owns that account. When set upUser logins. When it is active, a User is required to enter their password and verify the login through an additional application a PIN generated by an authenticator app such as Authy, Microsoft Authenticator or Google Authenticator or Duo. on another device such as their smartphone. This two step procedure is designed to ensure that the person logging into the CMS is the owner of that account.
| Info |
|---|
|
What two-factor authentication means for CMS login procedures
| Table of Contents | ||
|---|---|---|
|
User logins
Initial setup when forced
When two-factor authentication
...
has been set
...
as mandatory for a User
...
by the Administrator, they will be asked to set up the two-factor authentication when they next attempt to login.
- At the CMS login screen, User enters enter your Username and Password.
- Depending on the authentication method in place, the User accesses their device to retrieve a pin that must be entered or approves the login through an app.
- Instead of being logged in, the Authentication popup displays.
- Open the Authenticator app on your authentication device.
- Either scan the QR Code or manually enter the Manual Entry Key. NOTE - if the 'Manual Entry Key' option is used, ensure 'Time-Based' is selected when options are given.
- The Authenticator app generates a PIN that expires in a set amount of time. Enter this PIN in the Authentication popup.
- , Click Verify and Login. If the PIN is valid and has not expired, login will be successful. The Authenticator app saves the authentication account for future CMS logins.
| Anchor | ||||
|---|---|---|---|---|
|
A User can optionally add two-factor authentication to their CMS login. To set up the process, they must be logged in to CMS.
- In CMS, hover over the
icon on the top right corner of the screen.
- Select Manage Account.
- Click the Two-Factor Authentication Setup button.
- Using the authentication device, open the authenticator app and either scan the QR Code or manually enter the generated Manual Entry Key. NOTE - if the 'Manual Entry Key' option is used, ensure 'Time-Based' is selected if options are given.
- The Authentication app generates a PIN. Enter this PIN in Verify Setup by Entering Authenticator App PIN.
- Click Verify and Save. Authentication is complete.
Subsequent logins
Once a User has set up their two-factor authentication with the initial login, the Authenticator app saves the authentication account for CMS login. At the next login, the User just has to go to the CMS login account in the Authentication app to retrieve the current PIN. This PIN is required after the User enters their Username and Password.
Failed logins
- After five failed attempts, the User will be locked out for an hour.
Password changes
- A password Password change by the User must be authorised by entering the current generated PIN... entering the current pin in their setup authenticator application
Authenticator reset
- User reset: An
To change their password,
- While logged into CMS, the User selects Manage Account (top right corner of the screen).
- In the 'Change Password' screen, they enter the required the Current/New Password details as well as the current generated PIN from their Authenticator app.
Authenticator resets
Reset by User
A logged in authenticated User can reset their
...
authentication.
...
For example, a User may wish to change to another Authenticator app. Once the new setup is completed, it will automatically replace the old
...
one. To reset authentication, just follow the steps for a User-added Setup.
Loss of authenticator application
...
or access
If the authenticator application is no longer available, e.g., the device is lost, the User must contact Commerce Vision and ask for an account reset. Their CMS User account will be reset to allow the User to set up two-factor authentication again
...
when they next attempt to login (if
...
Set User-level two-factor authentication
...
two-factor authentication has been set as mandatory by the CMS Administrator) or by the User accessing the Two-factor Authentication feature once they are logged in with their Username and Password. (See Reset by User.)
Force two-factor authentication
CMS Administrators can force two-factor authentication on Users. This must be set for each CMS User individually.
Related help
| Content by Label | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|