Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

Available for VoipNow 5.6.1 or newer versions.

This document outlines the email-based Multi-Factor Authentication (MFA) and device trust features added to the existing login system. The feature adds an additional layer of security to the login process, requiring users to verify their identity through a token sent to their registered email address, and allowing trusted devices to bypass MFA for a specified period of time.

...

  • login_mfa_email: A boolean value indicating whether email-based MFA is activated (1) or not (0). Default value is 0.
  • login_mfa_email_valid: An integer value representing the number of seconds the MFA link is valid for. Valid values are between 120 and 3600, with a default value of 300.
  • login_mfa_trust_ttl: An integer value representing the number of days a device is trusted. Valid values are between 1 and 180 (6 months), with a default value of 180 days.

INSERT INTO misc values (null, 'login_mfa_email', 1);
INSERT INTO misc values (null, 'login_mfa_email_valid', 120);
INSERT INTO misc values (null, 'login_mfa_trust_ttl', 1);

Login

Here's what happens when users log in with email-based MFA:

...

Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 4.0 International.