Admin User Management - Revision history

Carfey at 19:55, 4 August 2021

2021-08-04T19:55:53Z

← Older revision		Revision as of 19:55, 4 August 2021
Line 85:		Line 85:

	'''As of Obsidian 5.0'''		'''As of Obsidian 5.0'''

			'''Note:''' MFA does not apply to the [[REST API]], and any user with API privileges will be able to invoke endpoints without an MFA code.

	Obsidian supports multi-factor authentication via [https://en.wikipedia.org/wiki/Google_Authenticator Google Authenticator], which generates rotating one-time codes on your mobile device. Other MFA approaches such as email and SMS are not supported, as they have inherent security issues.		Obsidian supports multi-factor authentication via [https://en.wikipedia.org/wiki/Google_Authenticator Google Authenticator], which generates rotating one-time codes on your mobile device. Other MFA approaches such as email and SMS are not supported, as they have inherent security issues.

Carfey at 19:53, 4 August 2021

2021-08-04T19:53:45Z

← Older revision		Revision as of 19:53, 4 August 2021
Line 122:		Line 122:

	[[File:MFA reset success.png]]		[[File:MFA reset success.png]]


	Users will then be allowed to perform MFA setup for the number of days configured via ''mfaSetupDays''.		Users will then be allowed to perform MFA setup for the number of days configured via ''mfaSetupDays''.

Carfey at 19:53, 4 August 2021

2021-08-04T19:53:22Z

← Older revision		Revision as of 19:53, 4 August 2021
Line 122:		Line 122:

	[[File:MFA reset success.png]]		[[File:MFA reset success.png]]


			Users will then be allowed to perform MFA setup for the number of days configured via ''mfaSetupDays''.

Carfey: /* MFA Resets */

2021-08-04T19:52:10Z

MFA Resets

← Older revision		Revision as of 19:52, 4 August 2021
Line 112:		Line 112:

	[[File:MFA user listing reset button.png]]		[[File:MFA user listing reset button.png]]


	The screen presented after clicking this button will allow you to reset one or more users' MFA state. Either select a known user from the list, or type a user name and click the plus button. Your current user password must also be entered for security reasons.		The screen presented after clicking this button will allow you to reset one or more users' MFA state. Either select a known user from the list, or type a user name and click the plus button. Your current user password must also be entered for security reasons.
Line 118:		Line 117:

	[[File:MFA reset page.png]]		[[File:MFA reset page.png]]


	When you are happy with your changes, click the Reset button.		When you are happy with your changes, click the Reset button.

Carfey: /* Completing MFA Setup */

2021-08-04T19:51:20Z

Completing MFA Setup

← Older revision		Revision as of 19:51, 4 August 2021
Line 96:		Line 96:

	Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.		Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.


	[[File:MFA setup prompt.png]]		[[File:MFA setup prompt.png]]

Carfey: /* MFA Resets */

2021-08-04T19:50:42Z

MFA Resets

← Older revision		Revision as of 19:50, 4 August 2021
Line 104:		Line 104:

	=== MFA Resets ===		=== MFA Resets ===

			If a user does not complete MFA setup within the allowed time, or a new user is added when not using Obsidian native authentication, you may need to perform an MFA reset so that they may complete MFA setup and log in. It can also be used to force a user to re-perform MFA setup and invalidate any existing Google Authenticator entries for the account.

			When MFA is enabled, the typical user listing table will include a button to perform MFA Resets.


			[[File:MFA user listing reset button.png]]


			The screen presented after clicking this button will allow you to reset one or more users' MFA state. Either select a known user from the list, or type a user name and click the plus button. Your current user password must also be entered for security reasons.


			[[File:MFA reset page.png]]


			When you are happy with your changes, click the Reset button.


			[[File:MFA reset success.png]]

Carfey: /* Completing MFA Setup */

2021-08-04T19:43:15Z

Completing MFA Setup

← Older revision		Revision as of 19:43, 4 August 2021
Line 97:		Line 97:
	Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.		Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.

	[[File:MFA setup prompt.png~~\|400px~~]]		[[File:MFA setup prompt.png]]

	=== Logging in After Setup ===		=== Logging in After Setup ===

Carfey: /* Completing MFA Setup */

2021-08-04T19:42:28Z

Completing MFA Setup

← Older revision		Revision as of 19:42, 4 August 2021
Line 97:		Line 97:
	Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.		Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.

	[[File:MFA setup prompt.png\|~~500px~~]]		[[File:MFA setup prompt.png\|400px]]

	=== Logging in After Setup ===		=== Logging in After Setup ===

Carfey: /* Completing MFA Setup */

2021-08-04T19:42:21Z

Completing MFA Setup

← Older revision		Revision as of 19:42, 4 August 2021
Line 96:		Line 96:

	Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.		Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.

			[[File:MFA setup prompt.png\|500px]]

	=== Logging in After Setup ===		=== Logging in After Setup ===

Carfey: /* Completing MFA Setup */

2021-08-04T19:41:59Z

Completing MFA Setup

← Older revision		Revision as of 19:41, 4 August 2021
Line 95:		Line 95:
	=== Completing MFA Setup ===		=== Completing MFA Setup ===

	Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code.		Once MFA is enabled, when you log in you will see the typical login screen. After entering your user name and password, you will be prompted to perform set up with Google Authenticator. Simply follow the on-screen instructions to scan the presented QR code. Once setup is complete, you will be logged in.

			=== Logging in After Setup ===

	~~[[File:MFA~~ setup ~~prompt~~.~~png\|400px]]~~		After initial setup is complete, when you log in you will still see the typical login screen. After entering your user name and password, you will be prompted to enter the appropriate code from Google Authenticator to complete login.

	=== MFA Resets ===		=== MFA Resets ===