Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Two-factor authentication (also known as 2FA ) is a method of confirming a user's claimed identity by utilizing a combination of two different components - ClientSpace 2FA in NEXT uses the standard username and password combination as the first factor, and a generated code sent to the user at authentication time as a second confirmation factor.  To configure 2FA for your ClientSpace NEXT installation, perform the following steps.

...

2FA Step-by-step guide

Panel
titleConfiguring user accounts for TFA2FA
  1. Insure that each user has a valid Primary email configured on the main tab of their user profile in ClientSpace
  2. Should they wish to receive authentication information via text insure they have a valid SMS Email configured on the Other Info tab of their user profile (see SMS Email formats below)
  3. If the user does not receive the authentication code in a timely fashion, check the configurations above on the user profile. 

...

  • Check the user profile and if the SMS Email is configure, attempt to send a TFA 2FA authentication code to the configured email address (see SMS Email Formats below)
  • If SMS Email is not configured, the system will send an email to the Primary email of the user containing the authorization code.
  • Once the user receives the authorization code they can enter it into the security box, which will create a security token (system cookie) containing a hashed code separate from the session cookie created by logging in.
  • This cookie is checked against the current 2FA cookie stored in ClientSpace and if the hashed codes match, the user is authenticated.  The cookie will live in the browser for the length of time specified under App Settings***, at which point the cookie will expire and the user will be prompted for 2FA again.

...