Authentication modules allows for secure and simple login.
From the administration area, you can enable authentication strategies that work best for you. Multiple strategies can be enabled at the same time. For example, you could allow your users to login using their Google, Facebook or GitHub account.
Note that the default Local strategy cannot be disabled as it is required for root administrator login.
Most strategies require some configuration. Check out the links below for module specific configuration instructions.
By default, new users are not authorized to access anything. They must either be pre-authorized by an administrator or be put into an existing group using the self-registration option.
The latter greatly simplifies the onboarding of new users. The self-registration option can be enabled on a per authentication strategy basis.
On the authentication module configuration page, enable the Self-registration option.
You can optionally set a domain whitelist so that only users with a specific email domain can proceed. To do so, enter a list of domains, e.g.:
company.com then press Enter. Repeat for all domains you want to authorize.
Finally, select the group new users will be assigned to the first time they log in.
Click Apply to save the configuration.
This feature is available from version 2.5 and up.
Two-Factor Authentication (2FA) adds an extra layer of protection to user accounts. It combines something you know (your password) with something you have / are (mobile phone, fingerprint, security key, etc.).
Even if a malicious user obtain your password, they will be unable to login because they don't have the second authentication factor.
2FA can be enabled globally to all users or on per-user basis.
To force all users to use 2FA on their account, go to the Administration Area and click on Security in the sidebar navigation.
Enable the Enforce 2FA option and click Apply.
All users will be required to setup 2FA on their account the next time they login.
In the Administration Area, click on Users in the sidebar navigation.
Select the user to edit and click on the ON switch next to the Two Factor Authentication row.
The user will be required to setup 2FA on their account the next time they login.
At the moment, only the administrator can enable 2FA for a user. Users will be able to self-enable 2FA in a future release.
It's possible to modify how the login experience is presented to the user from the Administration Area > Security section:
An alternate image background can be set for the login screen. Enter the full path to an image (.jpg / .png).
Note that if you upload an image directly to the wiki, you must ensure that this path is accessible to guest users! It's recommended to upload the image to a dedicated asset folder and give
read:assetspermission to that folder path on the Guests group.
When using a social provider (e.g. Google authentication), you may want to skip the login screen altogether and redirect the user directly to the social provider for a faster login.
You can always access the login screen even when this option is enabled by adding
?all=1to the login URL. (e.g.
If you have multiple authentication providers enabled but wish to hide the default local provider, you can enable this option to hide it.
You can always unhide it when this option is enabled by adding
?all=1to the login URL. (e.g.