Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

It is possible to set up the Google Authenticator service app to provide your Multi-Factor Authentication for the Hosting Portal. This page explains how the service app works and how to set it up for hosting.

...

The main benefits of using Google Authenticator are:

  • Uses It uses the same secure method of creating one-time passcodes that we already use for our current two factoras the default two-factor process in hosting.
  • It is completely free for us and the user.
  • No Unlike the default process, there is no need to wait for an email, SMS, or phone call.

The Google Authenticator app is available for Android and iOS .

Prerequisites

...

Adding Google Authentication

...

It is possible to set up Google Authentication on your own account as well as other accounts if you have Supervisor status set in PICS /wiki/spaces/POH/pages/277348452.

Adding Google Authentication

...

There are two ways to allow a user to use Google Authentication.

...

to Your Own Profile

If available, you can set Google authentication for yourself on your User Profile Page. This can be accessed by mousing  page. To access this page, hover over your name in the the top-right corner of the Hosting Portal homepage and then clicking the "select My Profile" drop down.

Image Removed

From the "My Profile" page click the "Edit button". This will display your profile details including your available and set authentication methods. Tick the "Google Authenticate" option and then "Save".

Image RemovedImage Added

In your profile, select Edit and tick Google Authenticate in the Two Factor Authentication Methods section. Select Save to continue.

Image Added

You will then be prompted to visit the authenticator Authenticator settings page

Image Removed

You will notice that the profile page will now have a new button. Click the "Google Authenticate Settings" button.

Image Removed

In your authenticator app . Select OK to return to your profile.

Image Added

Your profile will now display the Google Authenticate Settings button. Select this to go to the setting page.

Image Added

Follow the instructions on the page and download the app.

Image Added

In your Authenticator app, add an account and scan the shown QR code.

Image RemovedImage Added

Enter the code shown into the confirmation box and click "Confirm"the Verification Code field in the hosting portal and select Confirm. You will get receive a toast notification indicating whether adding the authentication was successful or not.

User management - Add authentication to another user

...

Adding Google Authentication to Other Profiles

This options requires Pellcomp or Supervisor permissions.

In the "Manage Users" section section, edit a user. The "As above, the Google Authenticate" option  option will show if it is available.  Tick it Tick the box to add itthe option. The next time the user logs in, they will be prompted to set it up using the profile method detailed explained above.

Removing Google Authentication

This can again be done in the the user profile User Profile or the manage users Manage Users section. Simply un-tick To do this, untick the Google Authenticate option or click the remove authenticator select Remove Authenticator option in the authenticator settings

How to use - The login process

The login process is pretty much the same as normal.

ADFS will ask for your username/password.

You will be prompted Authenticator Settings page.

Logging in with Google Authenticator

Logging In to the Hosting Portal is the same with Google Authenticator, except when you are asked to select a two factor method. Note that if Google Authenticate is your only available option AND , you will be able to select Google Authenticate.

If you are a Pellcomp user and the Authenticator has been added for you, but you have not yet set it up you will be allowed to select email as your two factor method. This will allow you to login so you can setup your authenticator.For non Pellcomp users, if Google authenticate is your only available option and you have not set it up yet, you will yet, the option to verify by Email will be available as well, even if that has not been added as a method for you. This means that you can login and set up the Authenticator. If you are not a Pellcomp user, and only Google Authenticate has been added for you, you will instead be directed to and limited to the Profile section of the hosting site. A notification instructing the user to setup authentication you to set up Google Authentication will be shown.