Alfresco and 2 Factor Authentication Ermanno Russo Developer at Zaizi.

Slides:



Advertisements
Similar presentations
User Authentication on Mobile Devices Google Two Factor Authentication OTP (One Time Password)
Advertisements

Windows XP System Restore July 22 nd, 2006 CAEUG Meeting.
Forms Authority Database Store Username and Passwords: ASP.NET framework allows you to control access to pages, classes, or methods based on username and.
Safe  Secure  Reliable. Traceloc is a Location tracker application for Tracking the movement of your phone or device. Install this App to your target.
Two-Factor Authentication & Tools for Password Management August 29, 2014 Pang Chamreth, IT Development Innovations 1.
Two Factor Authentication (TFA) is a 100% Open Source, free to use security system for your Joomla site’s backend. Two Factor Authentication works in.
(NHA) The Laboratory of Computer Communication and Networking Network Host Analyzer.
PASSWORD MANAGER Why you need one 1. WHAT IS A PASSWORD MANAGER? A modern Password Manager is a browser extension (Chrome, Internet Explorer, Firefox,
Setting Up your School iPad A quick guide. 1. Setting up iCloud When you turn it on for the first time, your iPad will take you through a set up process.
Leading at Every Turn. 1)Make sure you have your Trusted Sites configured properly in Internet Explorer 2)Store your credentials on your PC so you.
PASSWORD MANAGEMENT MADE EASY A Project Play Date - September 26, 2008 Beth Carpenter, Library Services Manager, Outagamie Waupaca Library System.
Confidential - © 2012 StreamWIDE © StreamWIDE
 Password is what you set or student number  User name is  first 5 letters of last name  nelso  First 3 letters of first name  kar  Looks like:
How KeePass password safe can save you time and energy
Once you have contacted me to set up a new account, your computer needs to be configured to dial into.DevlinEx and use our servers for things like .
Extending Forefront beyond the limit TMG UAG ISA IAG Security Suite
Student iPad WebDAV Setup Guide. First WebDAV needs to be downloaded from the App Store. 1) Tap “App Store”
 In Karnataka, Digital Signatures are being extensively used in various projects right from delivery of citizen centric services through various projects.
Welcome to MyBethel, Powered by CCBBETHEL CLEVELAND Confidential 1 Energy & Construction 2011 Business Plan Review Getting Started: Request a Username.
Instructions for Administrators Choose the Enrollment slide decks that match your environment, either for SaaS or On Premise. Edit the red text to match.
Tab Pilot Updates 5.0 What’s new for Tab Pilot this fall?
Instructions for Administrators Choose the Enrollment slide decks that match your environment, either for SaaS or On Premise. Edit the red text to match.
Setting up and getting going with…. MIT App Inventor.
Backups A guide to backing up your files. Why is it important to back up your work/information? The reason why you should backup is that in case your.
Case Study.  Client needed to build data collection agents for various mobile platform  This needs to be integrated with the existing J2ee server 
Wessex Database Training Introduction For Counselors Glenn Harvey March 2010.
Core 3: Communication Systems. Network software includes the Network Operating Software (NOS) and also network based applications such as those running.
Data-Basics Training & Support TechAnywhere Android Credit Card Processing with OpenEdge OpenEdge™
DSL-2540T PPPoA Configuration. Client Configuration Set Your System to Get IP From DSL-2540T built-in DHCP Server Click “OK” to Save Select to Obtain.
Instructions for Administrators Choose the Enrollment slide decks that match your environment, either for SaaS or On Premise. Edit the red text to match.
How Your Customers Will Pay Online & by Phone
Adxstudio Portals Training
24 October 2007 Fernando Lucas Rodriguez Adaptation of HyperNews for the NICE (SSO) authentication.
0 SAT Online - Student Registration What You Will Need In order to register, you must have: –A working account –Several possible user names* –A unique.
BuzzLah iOS Installation/User Guide
OpenEMR: Getting Started Based on OpenEMR version 4.1 Laboratory Informatics Institute January 2014.
If screen is locked press: Ctrl*Alt*Delete Login: Your Sharepoint Login & Password Go to: Sharepoint then Construction Administration Go to: Drawing Review.
Maryknoll Wireless Network Access Steps for Windows 7 As of Aug 20, 2012.
What is Cloud Computing 1. Cloud computing is a service that helps you to perform the tasks over the Internet. The users can access resources as they.
1 E-Site - FTP Services Setup / install guide. 2 About FTP services can run on any desired port(s) Runs as a windows service Works for all sites installed.
Hondros College Student Mail System
Student Access Instructions
Administrating a Database
IT Security Awareness Day October 19, 2016
Setting Up Your iPad.
 Gmail is a free webmail service, developed by Google.  Gmail also supports advertising.  Users can access Gmail on the desktop, laptop or through.
Two-factor authentication
Multifactor Authentication
HDV130/100 Upgrade Firmware March
Setting Up Chatter on Mobile devices
SQL Server 2005 Installation
Activate and deactivate the HBO go service from IOS 10.2 os.
Gmail Settings
When we talk about the process to create Hotmail account, the simple method helps the users to improve the experience. Hotmail is not a common ing.
Multifactor Authentication & First Time Login
GSBS IT Resources and Security
Start by going to E-First Piece under Quality in Business Functions
Google Classroom Setting Up Using a Computer.
How to Set up Remote Access to Personal U: drive
Multi-Factor Authentication
Online Purchase :- Purchase MS Office 365 online as it is an easy procedure which merely takes a few minutes. You just need to visit.
How to Set Secret Question ?.
How to Download the Firefly Student App to your device
Clemson For iOS Devices and Wi-Fi Setup
This presentation document has been prepared by Vault Intelligence Limited (“Vault") and is intended for off line demonstration, presentation and educational.
iGoogle and Google Docs
Administrating a Database
How to access Lexis 360 Students? New user
NCSA Duo.
Presentation transcript:

Alfresco and 2 Factor Authentication Ermanno Russo Developer at Zaizi

What is 2 factor authentication?

Initial setup User. Chooses to setup 2FA Server. Generates a secret. Associates it with the user’s account. Makes it available to the user User. Stores the secret in a specific device

Initial setup User. Chooses to setup 2FA Server. Generates a secret. Associates it with the user’s account. Makes it available to the user User. Stores the secret in a specific device

How does the login work? User. Device combines secret + current time. Types the code along with credentials

How does the login work? User. Device combines secret + current time. Types the code along with credentials Server. Retrieves the user’s secret. Computes the code itself from it

How does the login work? User. Device combines secret + current time. Types the code along with credentials Server. Retrieves the user’s secret. Computes the code itself from it. Checks it matches. Checks normal user/password

To put it simply Like a second password - Provided by a device - You don't have to remember it - Changes automatically every 30sec - If the device is stolen, the thief still doesn't know your credentials

To put it simply Like a second password - Provided by a device - You don't have to remember it - Changes automatically every 30sec - If the device is stolen, the thief still doesn't know your credentials

Why use 2 factor authentication? Password

Why use 2 factor authentication? (2) Password + code Password + Outdated code

What about Alfresco?

Google Authenticator IETF RFC 6238

S etup screen

L ogin screen

Device lost - Admin help

Reducing manual admin intervention. Saving the secret somewhere safe. Disposable time agnostic codes

Reducing manual admin intervention. Saving the secret somewhere safe. Disposable time agnostic codes

Conclusion Something you know. Your password Something you have. Your decoding device

Resources RFC Install Google Authenticator app ?hl=ens/answer/ ?hl=en Any question welcome