Difference between revisions of "Multifactor Authentication"

From Studentnet Wiki
Jump to navigation Jump to search
 
(44 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
==Multifactor Authentication (MFA)==
 
==Multifactor Authentication (MFA)==
  
−
The purpose of using MFA is it adds another method of verification, increasing security. It sends a code via SMS for the user to input as well as their username and password.
+
The purpose of using MFA is it adds another method of verification, increasing security. Users will need to input a code well as their username and password when trying to login to a service.
  
−
==Activating MFA==
+
For school's wishing to use Multifactor Authentication and are not getting a prompt for a code, lodge a ticket at [https://support.studentnet.net support website] requesting for Multifactor to be enabled.
−
# Login to dashboard
 
−
# Navigate to '''Users'''
 
−
# Either select a user or create a new user
 
−
# Navigate to '''Recovery Details''' and click '''Edit'''
 
−
# Add a valid phone number into '''Recovery Phone''' field
 
−
# Click '''submit'''
 
−
# Navigate to '''Security''' and click '''Turn On'''
 
−
# Click '''yes,enable Multifactor'''
 
−
===Notes===
 
−
* To be done as an administrator
 
  
 +
==MFA setup for individual users to do==
  
−
==Set MFA with an Authenticator App==
+
{| class="wikitable"
 +
|+ MFA Setup
 +
|-
 +
! MFA Type !! Description !! Wiki Documentation
 +
|-
 +
| '''Setting up MFA via CloudworkID Authenticator'''|| Instructions for setting up MFA via CloudworkID Authenticator|| [https://wiki.studentnet.net/index.php/Setup_MFA_with_CloudworkID_Authenticator Link to Documentation]
 +
|-
 +
| '''Setting up MFA via Generic Authenticator App with QR Code'''|| Instructions for setting up MFA via Generic Authenticator app using QR code|| [https://wiki.studentnet.net/index.php/Set_MFA_with_an_Authenticator_App_with_QR_code Link to Documentation]
 +
|-
 +
| '''Setting up MFA via an Authenticator App with setup key'''|| Instructions for setting up MFA via Generic Authenticator app using setup key|| [https://wiki.studentnet.net/index.php/Set_MFA_with_an_Authenticator_App_with_setup_key Link to Documentation]
 +
|-
 +
| '''Setting up MFA via 1Password'''|| Instructions for setting up MFA via 1Password|| [https://wiki.studentnet.net/index.php/Set_MFA_with_1Password_Link Link to Documentation]
 +
|-
 +
| '''Setting up MFA via SMS'''||Instructions for setting up MFA via SMS|| [https://wiki.studentnet.net/index.php/Set_MFA_with_SMS Link to Documentation]
 +
|}
  
−
By using an Authenticator App instead on SMS will allow users to log in if there is no reception for their phone to retrieve code via SMS
+
==Admins setting up MFA for a user==
  
−
# Go to your school's Cloudwork.ID
+
{| class="wikitable"
−
# Navigate to the top right of the site where your name is
+
|+ MFA Setup done as admin for a user
−
# Click '''Settings'''
+
|-
−
# In '''Mulftifactor Authentication''' click '''Add Authenticator App'''
+
! MFA Type !! Description !! Wiki Documentation
−
# Using '''Google Authenticator''' click on the bottom right, the plus sign
+
|-
−
# Click scan barcode
+
| '''Setting up MFA via CloudworkID Authenticator'''|| Instructions for setting up MFA via CloudworkID Authenticator|| [https://wiki.studentnet.net/index.php/Enable_MFA_for_CloudworkID_Authenticator_via_admin Link to Documentation]
−
# Point the camera to the barcode so the red lines line up with the barcode on your school's Cloudwork.ID
+
|-
−
# Input code that is shown on '''Google Authenticator''', to your school's Cloudwork.ID
+
| '''Setting up MFA via Generic Authenticator App with QR Code'''|| Instructions for setting up MFA via Generic Authenticator app using QR code || [https://wiki.studentnet.net/index.php/Enable_MFA_for_Authenticator_App_via_admin_by_scanning_QR_code Link to Documentation]
−
===Notes===
+
|-
−
* To be done as an individual user
+
| '''Setting up MFA with an Authenticator App with setup key'''|| Instructions for setting up MFA via Generic Authenticator app using setup key || [https://wiki.studentnet.net/index.php/Enable_MFA_for_Authenticator_App_via_admin_by_entering_setup_key Link to Documentation]
−
* Users do not need to use '''Google Authenticator App''', there are other apps such as Microsoft Authenticator and Authy 2-Factor Authentication
+
|-
 +
| '''MFA with SMS'''|| Instructions for setting up MFA via SMS || [https://wiki.studentnet.net/index.php/Enable_MFA_for_SMS_via_admin Link to Documentation]
 +
|}
  
 +
==MFA Settings in the Cloudwork Dashboard for Admins==
  
−
==Enabling MFA Whitelist==
+
{| class="wikitable"
 +
|+ MFA Micro Management
 +
|-
 +
! MFA Type !! Description !! Wiki Documentation
 +
|-
 +
| '''MFA Whitelist'''|| IP Addresses listed will not require MFA when signing in|| [https://wiki.studentnet.net/index.php/MFA_Whitelist Link to Documentation]
 +
|-
 +
| '''Enforce MFA for certain OU'''|| Force specific OUs to have MFA enabled to be able to continue using services|| [https://wiki.studentnet.net/index.php/Enforcing_MFA_for_a_specific_OU Link to Documentation]
 +
|-
 +
| '''Enabling Trusted Device'''|| Allow users to remember an device so users are not prompted for MFA|| [https://wiki.studentnet.net/index.php/Trusted_Device Link to Documentation]
 +
|-
 +
| '''Letting users manage MFA'''|| Allow users to manage what MFA option a user can use as well remove MFA options they no longer need|| [https://wiki.studentnet.net/index.php/Letting_users_manage_their_own_MFA Link to Documentation]
 +
|-
 +
| '''Enforcing MFA for a SSO Service'''|| Before users can access an SSO Service, MFA must be enabled|| [https://wiki.studentnet.net/index.php/Enforcing_MFA_for_a_SSO_Service Link to Documentation]
 +
|}
  
−
Using MFA Whitelist for your school's Ip address range will allow users logging in, inside the school to not have to go through MFA. But logging in outside school will have the user go through MFA
+
==Miscellaneous MFA Information==
  
−
# Login into your school's dashboard
+
{| class="wikitable"
−
# Navigate to the left hand side the triple bar>settings>Cloudwork.ID settings
+
|+ Miscellaneous MFA Information
−
# Navigate to '''Features''' and click '''Edit'''
+
|-
−
# Navigate to '''Multifactor Authentication Whitelist'''
+
! Information !! Description !! Wiki Documentation
−
# Enter into the field your school's Ip address or Ip address range
+
|-
−
===Notes===
+
| '''Creating a Custom CloudworkID Authenticator App'''|| Instructions on how to lodge a ticket for creating a custom CloudworkID Authenticator App|| [https://wiki.studentnet.net/index.php/Creating_a_custom_CloudworkID_Authenticator_App Link to Documentation]
−
* To be done as an administrator
+
|}
  
−
==Trusted device==
 
−
As a feature of Multifactor, Users have the option when logging in to select '''I trust this device, don't ask again'''. This means for the next 30 days the user will not have to use a code for MFA.
 
−
 
−
==Disabling Trust Device==
 
−
This feature can disable any user from having the option to trust a device.
 
−
 
−
# Login into your school's dashboard
 
−
# Navigate to Cloudwork.ID settings
 
−
# Navigate to '''Features''' and click '''Edit'''
 
−
# Navigate to '''Enable Trusted Devices'''
 
−
# Select the option '''Do not let users trust device'''
 
−
 
−
==Enabling users to Manage MFA==
 
−
This features allows users manage their own MFA setting such as adding their own phone number or app for MFA.
 
−
 
−
# Login into your school's dashboard
 
−
# Navigate to Cloudwork.ID settings
 
−
# Navigate to '''Features''' and click '''Edit'''
 
−
# Under '''Multifactor Authentication''', select from the drop down '''Users can manage multifactor authentication'''
 
−
 
−
==Allow users to disable MFA==
 
−
This feature allows users to Turn MFA off for themselves.
 
−
 
−
# Login into your school's dashboard
 
−
# Navigate to Cloudwork.ID settings
 
−
# Navigate to '''Features''' and click '''Edit'''
 
−
# Under '''Disable Multifactor''', select from the drop down '''Users can disable multifactor authentication'''
 
−
 
−
==MFA without storing a mobile phone number==
 
−
 
−
# login to the CloudworkID service
 
−
# Select '''Update Recovery Settings'''
 
−
# Supply a valid mobile phone number and click '''Submit'''
 
−
# Enter the verification code and click '''Submit'''
 
−
# Click '''Turn on''' underneath MFA
 
−
# Enter the verification code and click '''Submit'''
 
−
# Click '''Add Authenticator App'''
 
−
# On your phone, scan the QR code. Then enter the verification code and click '''Submit'''
 
−
# Click the trash icon next to '''Text Message to .....'''
 
−
# Click '''Delete''' to confirm
 
−
# Click '''Update recovery settings'''
 
−
# Clear the form field for '''Recovery Phone''' and click submit
 
−
 
−
The user now has MFA operating, without having their personal mobile tied to their account.
 
−
 
−
==Enable MFA for users as an admin==
 
−
 
−
===Enable MFA for SMS via admin===
 
−
# Login as an admin to the Cloudwork Dashboard
 
−
# Navigate to Users and click intended user
 
−
# Under Security click '''Enable SMS'''
 
−
# If a recovery phone number is not set, one will need to be entered
 
−
# If a recovery phone number is already entered MFA for SMS will be activated
 
−
 
−
===Enable MFA for Authenticator App via admin===
 
−
By enabling MFA for Authenticator App via admin, users can have MFA operating, without having their personal mobile tied to their account.
 
−
 
−
# Login as an admin to the Cloudwork Dashboard
 
−
# Navigate to Users and click intended user
 
−
# Under Security click '''Enable App'''
 
−
# Open up the Authenticator App and scan the code
 
−
# Enter the code and MFA for Authenticator App will be activated
 
−
 
−
===Turn off MFA via admin===
 
−
This will turn off MFA via SMS and MFA via App.
 
−
 
−
# Login as an admin to the Cloudwork Dashboard
 
−
# Navigate to Users and click intended user
 
−
# Under Security click '''Turn Off'''
 
−
 
−
===Notes===
 
−
To be done as an administrator
 
  
 
[[Category:Cloudwork Dashboard]]
 
[[Category:Cloudwork Dashboard]]

Latest revision as of 05:26, 9 August 2023

Multifactor Authentication (MFA)

The purpose of using MFA is it adds another method of verification, increasing security. Users will need to input a code well as their username and password when trying to login to a service.

For school's wishing to use Multifactor Authentication and are not getting a prompt for a code, lodge a ticket at support website requesting for Multifactor to be enabled.

MFA setup for individual users to do

MFA Setup
MFA Type Description Wiki Documentation
Setting up MFA via CloudworkID Authenticator Instructions for setting up MFA via CloudworkID Authenticator Link to Documentation
Setting up MFA via Generic Authenticator App with QR Code Instructions for setting up MFA via Generic Authenticator app using QR code Link to Documentation
Setting up MFA via an Authenticator App with setup key Instructions for setting up MFA via Generic Authenticator app using setup key Link to Documentation
Setting up MFA via 1Password Instructions for setting up MFA via 1Password Link to Documentation
Setting up MFA via SMS Instructions for setting up MFA via SMS Link to Documentation

Admins setting up MFA for a user

MFA Setup done as admin for a user
MFA Type Description Wiki Documentation
Setting up MFA via CloudworkID Authenticator Instructions for setting up MFA via CloudworkID Authenticator Link to Documentation
Setting up MFA via Generic Authenticator App with QR Code Instructions for setting up MFA via Generic Authenticator app using QR code Link to Documentation
Setting up MFA with an Authenticator App with setup key Instructions for setting up MFA via Generic Authenticator app using setup key Link to Documentation
MFA with SMS Instructions for setting up MFA via SMS Link to Documentation

MFA Settings in the Cloudwork Dashboard for Admins

MFA Micro Management
MFA Type Description Wiki Documentation
MFA Whitelist IP Addresses listed will not require MFA when signing in Link to Documentation
Enforce MFA for certain OU Force specific OUs to have MFA enabled to be able to continue using services Link to Documentation
Enabling Trusted Device Allow users to remember an device so users are not prompted for MFA Link to Documentation
Letting users manage MFA Allow users to manage what MFA option a user can use as well remove MFA options they no longer need Link to Documentation
Enforcing MFA for a SSO Service Before users can access an SSO Service, MFA must be enabled Link to Documentation

Miscellaneous MFA Information

Miscellaneous MFA Information
Information Description Wiki Documentation
Creating a Custom CloudworkID Authenticator App Instructions on how to lodge a ticket for creating a custom CloudworkID Authenticator App Link to Documentation
Retrieved from "https://wiki.studentnet.net/index.php?title=Multifactor_Authentication&oldid=2104"