I have some q=question regarding Secure Login the User Management account access controls for community portal we need to ensure the administrative/privileged accounts require 1. Private Network and 2. Strong Authentication (Basic auth + MFA) access controls in-place.

[圖片] Jaskaran: Strong Authentication (Basic auth + MFA) access controls in-place That’s built in. Search site settings. [圖片] Jaskaran: Private Network I’m not aware of a way to do that. It’ll take a plugin. There’s a geofencing plugin that could be a start. Happy to help with that or …

You can restrict admin logins to specific IP addresses if that helps? use admin ip allowlist + allowing them in the Screened IPs

What happends when admin’s IP changes?

Wow! I didn’t know there was an admin allow-list! I’d guess it’ll take network addresses so you can give it a whole class C or whatever. [圖片] Jakke Flemming: What happends when admin’s IP changes? They’d need another admin to update the setting. But I would assume that this would be used whe…

That is kind of my point. Limiting IP can and will be a potentially hazardous setup if an admin works outside the business world :thinking: If such a security measure is needed and there is only one admin and the admin is using an IP that can and will change, then using Varnish or a similar fronten…

Hi I want to understand how enforce second factor is working . If i enable it for staff what we need to do extra for second authentiction

Did you take a look at the topics I linked in Two-factor authentication method for additional security during login - #4 by Moin ? The video was very helpful for me. You can also set up two-factor authentication for a test account to try without enabling the setting which forces staff to enable it…

安全登录

支持

JammyDodger 2024年八月31日 18:05 3

您可以通过将管理员登录限制为特定 IP 地址来提供帮助？use admin ip allowlist + 在已屏蔽的 IP 中允许它们。

話題		回覆	觀看
"You can't login from that IP address" Support	28	15403	2022年十二月9日
Admin Account Security Best Practices? Support	6	814	2021年三月1日
Limit login to staff only? Support	7	1176	2023年八月27日
User is saying their account is hacked Support	5	708	2020年六月20日
Disable /u/admin-login Support login	9	861	2024年三月20日

安全登录

相關主題