mirror of
https://github.com/pgadmin-org/pgadmin4.git
synced 2025-02-25 18:55:31 -06:00
Reverting 'Two-factor authentication' support as it cause OSX and docker build failures.
This reverts commit 787a441343.
This commit is contained in:
@@ -33,7 +33,6 @@ Mode is pre-configured for security.
|
||||
|
||||
deployment
|
||||
login
|
||||
mfa
|
||||
user_management
|
||||
change_user_password
|
||||
restore_locked_user
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 96 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 75 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 96 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 67 KiB |
@@ -1,88 +0,0 @@
|
||||
.. _mfa:
|
||||
|
||||
*************************************************
|
||||
`Enabling two-factor authentication (2FA)`:index:
|
||||
*************************************************
|
||||
|
||||
About two-factor authentication
|
||||
===============================
|
||||
Two-factor authentication (2FA) is an extra layer of security used when logging
|
||||
into websites or apps. With 2FA, you have to log in with your username and
|
||||
password and provide another form of authentication that only you know or have
|
||||
access to.
|
||||
|
||||
|
||||
Setup two-factor authentication
|
||||
===============================
|
||||
To set up 2FA for pgAdmin 4, you must configure the Two-factor Authentication
|
||||
settings in *config_local.py* or *config_system.py* (see the
|
||||
:ref:`config.py <config_py>` documentation) on the system where pgAdmin is
|
||||
installed in Server mode. You can copy these settings from *config.py* file and
|
||||
modify the values for the following parameters.
|
||||
|
||||
.. csv-table::
|
||||
:header: "**Parameter**", "**Description**"
|
||||
:class: longtable
|
||||
:widths: 35, 55
|
||||
|
||||
"MFA_ENABLED","The default value for this parameter is False.
|
||||
To enable 2FA, set the value to *True*"
|
||||
"SUPPORTED_MFA_LIST", "Set the authentication methods to be supported "
|
||||
"MFA_EMAIL_SUBJECT", "<APP_NAME> - Verification Code e.g. pgAdmin 4 -
|
||||
Verification Code"
|
||||
"MFA_FORCE_REGISTRATION", "Force the user to configure the authentication
|
||||
method on login (if no authentication is already configured)."
|
||||
|
||||
|
||||
Configure two-factor authentication
|
||||
===================================
|
||||
To configure 2FA for a user, you must click on 'Two-factor Authentication'
|
||||
in the `User` menu in right-top corner. It will list down all the supported
|
||||
multi factor authentication methods. Click on 'Setup' of one of those methods
|
||||
and follow the steps for each authentication method. You will see the `Delete`
|
||||
button for the authentication method, which is already been configured.
|
||||
Clicking on `Delete` button will deregister the authentication method for the
|
||||
current user.
|
||||
|
||||
.. image:: images/mfa_registration.png
|
||||
:alt: Configure two-factor authentication
|
||||
:align: center
|
||||
|
||||
You can also force users to configure the two-factor
|
||||
authentication methods on login by setting *MFA_FORCE_REGISTRATION* parameter
|
||||
to *True*.
|
||||
|
||||
Email authentication
|
||||
====================
|
||||
|
||||
To setup email authentication click on the `Setup` button besides of the
|
||||
'Email authentication' label.
|
||||
|
||||
.. image:: images/mfa_email.png
|
||||
:alt: Configure two-factor authentication
|
||||
:align: center
|
||||
|
||||
Enter the valid email address to send the validation code. Once you get the
|
||||
validation code enter that code to setup the email authentication.
|
||||
|
||||
*NOTE: You must set the 'Mail server settings' in config_local.py or
|
||||
config_system.py in order to use 'email' as two-factor authentication method
|
||||
(see the* :ref:`config.py <config_py>` *documentation).*
|
||||
|
||||
Authenticator App
|
||||
=================
|
||||
|
||||
To setup using any authenticator application which supports Time based One
|
||||
Time Password (TOTP) click on the `Setup` button besides of the
|
||||
'Authenticator App' label.
|
||||
|
||||
.. image:: images/mfa_auth_app.png
|
||||
:alt: Configure two-factor authentication
|
||||
:align: center
|
||||
|
||||
After the setup when you logged in to the pgAdmin 4 again, it will provide
|
||||
the option to authenticate using email or authenticator app.
|
||||
|
||||
.. image:: images/mfa_login.png
|
||||
:alt: Configure two-factor authentication
|
||||
:align: center
|
||||
@@ -10,7 +10,6 @@ New features
|
||||
************
|
||||
|
||||
| `Issue #4211 <https://redmine.postgresql.org/issues/4211>`_ - Added support for OWNED BY Clause for sequences.
|
||||
| `Issue #6543 <https://redmine.postgresql.org/issues/6543>`_ - Added support for Two-factor authentication for improving security.
|
||||
|
||||
Housekeeping
|
||||
************
|
||||
|
||||
Reference in New Issue
Block a user