I have some q=question regarding Secure Login the User Management account access controls for community portal we need to ensure the administrative/privileged accounts require 1. Private Network and 2. Strong Authentication (Basic auth + MFA) access controls in-place.

[图片] Jaskaran: Strong Authentication (Basic auth + MFA) access controls in-place That’s built in. Search site settings. [图片] Jaskaran: Private Network I’m not aware of a way to do that. It’ll take a plugin. There’s a geofencing plugin that could be a start. Happy to help with that or …

You can restrict admin logins to specific IP addresses if that helps? use admin ip allowlist + allowing them in the Screened IPs

What happends when admin’s IP changes?

Wow! I didn’t know there was an admin allow-list! I’d guess it’ll take network addresses so you can give it a whole class C or whatever. [图片] Jakke Flemming: What happends when admin’s IP changes? They’d need another admin to update the setting. But I would assume that this would be used whe…

That is kind of my point. Limiting IP can and will be a potentially hazardous setup if an admin works outside the business world :thinking: If such a security measure is needed and there is only one admin and the admin is using an IP that can and will change, then using Varnish or a similar fronten…

Hi I want to understand how enforce second factor is working . If i enable it for staff what we need to do extra for second authentiction

Did you take a look at the topics I linked in Two-factor authentication method for additional security during login - #4 by Moin ? The video was very helpful for me. You can also set up two-factor authentication for a test account to try without enabling the setting which forces staff to enable it…

安全登录

支持

JammyDodger 2024 年8 月 31 日 18:05 3

您可以通过将管理员登录限制为特定 IP 地址来提供帮助？use admin ip allowlist + 在已屏蔽的 IP 中允许它们。

话题		回复	浏览量
"You can't login from that IP address" Support	28	14994	2022 年12 月 9 日
Admin Account Security Best Practices? Support	6	791	2021 年3 月 1 日
Limit login to staff only? Support	7	1099	2023 年8 月 27 日
User is saying their account is hacked Support	5	627	2020 年6 月 20 日
Disable /u/admin-login Support login	9	734	2024 年3 月 20 日

安全登录

相关话题