| ... |
... |
@@ -83,6 +83,28 @@ |
| 83 |
83 |
'description': 'Custom authenticators, container authentication, special login flows or wiki farm authentication strategy.' |
| 84 |
84 |
}]) |
| 85 |
85 |
|
|
86 |
+#set ($authRows = [{ |
|
87 |
+ 'service': 'XWiki Authentication Review', |
|
88 |
+ 'price': '€290', |
|
89 |
+ 'bestFor': 'Understanding the current login flow, users, groups and access model.' |
|
90 |
+},{ |
|
91 |
+ 'service': 'OIDC / Microsoft Entra ID Setup', |
|
92 |
+ 'price': 'From €590', |
|
93 |
+ 'bestFor': 'SSO setup with Microsoft Entra ID, Keycloak or another compatible OIDC provider.' |
|
94 |
+},{ |
|
95 |
+ 'service': 'XWiki MFA Installation', |
|
96 |
+ 'price': 'From €490', |
|
97 |
+ 'bestFor': 'Adding MFA to the standard XWiki login flow.' |
|
98 |
+},{ |
|
99 |
+ 'service': 'LDAP / Active Directory Review', |
|
100 |
+ 'price': 'From €390', |
|
101 |
+ 'bestFor': 'LDAP or AD login, profile mapping, group mapping and synchronization questions.' |
|
102 |
+},{ |
|
103 |
+ 'service': 'Advanced Authentication Work', |
|
104 |
+ 'price': 'Quoted after review', |
|
105 |
+ 'bestFor': 'Custom authenticators, container authentication, special redirects or complex wiki farm scenarios.' |
|
106 |
+}]) |
|
107 |
+ |
| 86 |
86 |
#set ($supportPlans = [{ |
| 87 |
87 |
'icon': 'leaf', |
| 88 |
88 |
'title': 'Essential Support', |
| ... |
... |
@@ -253,6 +253,51 @@ |
| 253 |
253 |
</p> |
| 254 |
254 |
</div> |
| 255 |
255 |
|
|
278 |
+ <h2 id="authentication">Authentication & access control</h2> |
|
279 |
+ |
|
280 |
+ <p> |
|
281 |
+ XWiki authentication depends on the current login method, identity provider, user source, |
|
282 |
+ group mapping and access-control model. Agnease can help review, configure or improve standard |
|
283 |
+ XWiki login, LDAP, Active Directory, OpenID Connect, Microsoft Entra ID, MFA and more advanced |
|
284 |
+ authentication scenarios. |
|
285 |
+ </p> |
|
286 |
+ |
|
287 |
+ <div class="resource-note"> |
|
288 |
+ <p> |
|
289 |
+ <strong>MFA is treated separately:</strong> SSO, LDAP and OIDC define how users log in. |
|
290 |
+ MFA adds an additional verification layer. In some environments MFA belongs in XWiki, while in |
|
291 |
+ others it is better enforced by the external identity provider. |
|
292 |
+ </p> |
|
293 |
+ </div> |
|
294 |
+ |
|
295 |
+ <table class="table table-bordered table-striped"> |
|
296 |
+ <thead> |
|
297 |
+ <tr> |
|
298 |
+ <th>Authentication service</th> |
|
299 |
+ <th>Starting price</th> |
|
300 |
+ <th>Best for</th> |
|
301 |
+ </tr> |
|
302 |
+ </thead> |
|
303 |
+ <tbody> |
|
304 |
+ #foreach ($entry in $authRows) |
|
305 |
+ <tr> |
|
306 |
+ <td><strong>$entry.service</strong></td> |
|
307 |
+ <td>$entry.price</td> |
|
308 |
+ <td>$entry.bestFor</td> |
|
309 |
+ </tr> |
|
310 |
+ #end |
|
311 |
+ </tbody> |
|
312 |
+ </table> |
|
313 |
+ |
|
314 |
+ <div class="resource-cta"> |
|
315 |
+ <h3>Need authentication changes?</h3> |
|
316 |
+ <p> |
|
317 |
+ Send a short description of your current login method, user source, identity provider and the |
|
318 |
+ authentication result you want to achieve. |
|
319 |
+ </p> |
|
320 |
+ <a class="btn btn-primary" href="$contactURL">Request authentication review</a> |
|
321 |
+ </div> |
|
322 |
+ |
| 256 |
256 |
<h2 id="support">Monthly support plans</h2> |
| 257 |
257 |
|
| 258 |
258 |
<p> |