Skip to Content
Last modified by Agnease on 2026/06/24 16:39
From version 23.10
edited by Agnease
on 2026/06/24 15:56
Change comment: There is no comment for this version
To version 23.12
edited by Agnease
on 2026/06/24 15:58
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -XWiki Two-Factor Authentication
1 +XWiki Multi‑Factor Authentication
Content
... ... @@ -3,11 +3,11 @@
3 3  #set ($discard = $xwiki.ssx.use('products.WebHome'))
4 4  
5 5  #set ($mainCapabilityItems = [{
6 - 'title': 'Second verification step',
6 + 'title': 'MFA login protection',
7 7   'icon': 'key',
8 - 'content': 'Add an additional verification screen after the normal XWiki username and password login.'
8 + 'content': 'Add an additional verification step after the normal XWiki username and password login.'
9 9  },{
10 - 'title': 'Authenticator app codes',
10 + 'title': 'Authenticator app verification',
11 11   'icon': 'mobile',
12 12   'content': 'Let users verify access with time-based TOTP codes generated by authenticator applications.'
13 13  },{
... ... @@ -95,14 +95,14 @@
95 95   <div class="container hero-inner">
96 96   <div class="hero-kicker">
97 97   <i class="fa fa-lock" aria-hidden="true"></i>
98 - XWiki 2FA and MFA
98 + XWiki MFA and 2FA
99 99   </div>
100 100  
101 - <h1 id="product-title">XWiki Two-Factor Authentication (2FA/MFA)</h1>
101 + <h1 id="product-title">XWiki MFA and Two-Factor Authentication</h1>
102 102  
103 103   <p class="lead">
104 - Protect XWiki logins with a second verification step using authenticator app codes,
105 - recovery codes and trusted devices.
104 + Add multi-factor authentication to XWiki with authenticator app verification,
105 + recovery codes, trusted devices, user self-service and administrator monitoring.
106 106   </p>
107 107  
108 108   <div class="hero-actions">
... ... @@ -116,7 +116,7 @@
116 116   <div class="container">
117 117   <div class="product-layout">
118 118   <article class="product-summary-card">
119 - <h2 id="overview-title">Two-factor authentication built into XWiki</h2>
119 + <h2 id="overview-title">MFA support built into the XWiki login flow</h2>
120 120  
121 121   <p>
122 122   XWiki Two-Factor Authentication adds MFA support to the standard XWiki login flow.
... ... @@ -125,9 +125,9 @@
125 125   </p>
126 126  
127 127   <p>
128 - The extension is designed for organizations that want stronger access protection for
129 - internal knowledge bases, intranets, documentation platforms, customer portals and other
130 - XWiki-based applications.
128 + Beyond the login verification step, the extension also supports recovery codes, trusted devices,
129 + user self-service management, administrator reset actions and an administration overview for
130 + monitoring MFA adoption.
131 131   </p>
132 132   </article>
133 133  
... ... @@ -149,7 +149,7 @@
149 149  
150 150  <section aria-labelledby="capabilities-title">
151 151   <div class="container">
152 - <h2 id="capabilities-title">Main capabilities</h2>
152 + <h2 id="capabilities-title">Main MFA capabilities</h2>
153 153  
154 154   <p class="section-intro">
155 155   A focused set of MFA features for stronger XWiki account protection without replacing the familiar login experience.
... ... @@ -176,11 +176,11 @@
176 176   <div class="container">
177 177   <div class="product-layout">
178 178   <article class="product-summary-card">
179 - <h2 id="security-title">Useful for XWiki security and access protection</h2>
179 + <h2 id="security-title">MFA for XWiki security and access protection</h2>
180 180  
181 181   <p>
182 182   Many organizations use XWiki to store internal documentation, procedures, operational
183 - knowledge and business-critical information. Adding a second authentication factor helps
183 + knowledge and business-critical information. Adding an additional authentication factor helps
184 184   reduce the risk of account compromise when a password is exposed or reused.
185 185   </p>
186 186  
... ... @@ -285,7 +285,7 @@
285 285  
286 286  <section aria-labelledby="self-service-title">
287 287   <div class="container">
288 - <h2 id="self-service-title">Recovery codes and trusted devices</h2>
288 + <h2 id="self-service-title">MFA recovery codes and trusted devices</h2>
289 289  
290 290   <p class="section-intro">
291 291   Recovery codes and trusted devices help balance stronger access protection with a smoother user experience.
... ... @@ -361,11 +361,48 @@
361 361   </div>
362 362  </section>
363 363  
364 -<section aria-labelledby="rollout-title">
364 +<section aria-labelledby="mfa-faq-title">
365 365   <div class="container">
366 + <h2 id="mfa-faq-title">MFA questions</h2>
367 +
368 + <div class="resource-content">
369 + <details class="resource-faq-item">
370 + <summary>Is this an MFA or 2FA extension?</summary>
371 + <p>
372 + It is best described as an MFA extension for XWiki. The most visible login flow is two-factor authentication,
373 + but the extension also includes MFA policy, recovery codes, trusted devices, user self-service and administrator monitoring.
374 + </p>
375 + </details>
376 +
377 + <details class="resource-faq-item">
378 + <summary>Does it replace the standard XWiki login?</summary>
379 + <p>
380 + No. It adds an additional verification step after the normal XWiki username and password login.
381 + </p>
382 + </details>
383 +
384 + <details class="resource-faq-item">
385 + <summary>Which verification method is used?</summary>
386 + <p>
387 + Users verify access with time-based codes generated by an authenticator application.
388 + </p>
389 + </details>
390 +
391 + <details class="resource-faq-item">
392 + <summary>What happens if a user loses access to the authenticator app?</summary>
393 + <p>
394 + Recovery codes can provide backup access when enabled. Administrators can also reset the user MFA setup.
395 + </p>
396 + </details>
397 + </div>
398 + </div>
399 +</section>
400 +
401 +<section class="product-section-muted" aria-labelledby="rollout-title">
402 + <div class="container">
366 366   <div class="product-layout">
367 367   <article class="product-summary-card">
368 - <h2 id="rollout-title">Rollout recommendations</h2>
405 + <h2 id="rollout-title">MFA rollout recommendations</h2>
369 369  
370 370   <p>
371 371   For a smooth rollout, start with a small administrator or pilot group before requiring MFA for everyone.
... ... @@ -406,7 +406,7 @@
406 406  <section class="cta-section" aria-labelledby="cta-title">
407 407   <div class="container">
408 408   <div class="cta-panel">
409 - <h2 id="cta-title">Interested in using this extension?</h2>
446 + <h2 id="cta-title">Interested in XWiki MFA?</h2>
410 410  
411 411   <p>
412 412   Send a short message with your XWiki version, current authentication setup and MFA rollout goal.