درباره این فایل
Authentication Duo به شما این امکان را می دهد که Duo را به عنوان یکی دیگر از گزینه های Multi Factor Authentication (MFA) اضافه کنید. Duo خدمات پرداخت شده با یک ردیف محدود (تا 10 کاربر) است که اجازه مدیریت متمرکز تمامی کاربران مجاز را می دهد.
Duo Authentication lets you add Duo as another Multi Factor Authentication (MFA) option. Duo is a paid service with a limited free tier (up to 10 users) which allows centralized management of all authorized users.
Upload the plugin XML file to your Admin CP to install it.
Sign up for an account at Duo: https://signup.duo.com/
On your Duo dashboard, create a new "Web SDK" application. See the screenshot above (with 3 arrows and numbers) for an image of how to do this.
Make a note of the Integration Key, Secret Key, and API Hostname. Additionally, ensure that "Let users remove devices, add new devices, and reactivate Duo Mobile" is checked. If it is not, you will need to enroll your users yourself and they will be unable to manage their Duo account (add/remove authorized devices) from within Invision Community. If enrolling manually, ensure that the username in duo matches the "Duo identifier" setting in Invision Community. By default, this is the Member's ID number, but it can be changed to their Display Name or Email Address instead. See the screenshot above (with the 2 red boxes) for an image of where to find these settings.
Copy the Integration Key, Secret Key, and API Hostname into the Duo settings in the Multi Factor Authentication area of the ACP.
Toggle Duo from "Disabled" to "Enabled" -- your members can now use Duo!
To manage which types of notifications are supported (push, SMS, phone call, passcode), edit the policy on the Duo dashboard. You can also enable a "remember me" checkbox on the Duo dashboard which will allow the user to bypass MFA for a set number of days on the same device.
تغییرات جدید در نسخه 1.0.1
Control what identifier is sent to Duo: member id, display name, or email address!
Previously, the member id was sent over, as this was the only identifier that could not be changed by a member. However, this results in the user list and logs in Duo's admin panel to be largely unreadable, unless you added those ids as aliases for existing users (which uses one of your 4 allowed aliases). Now, you can configure Duo Authentication to send either the member's display name or email address instead.
This is primarily useful in environments where the members protected with Duo Authentication are unable to change their display name or email address. Should you select one of these options and a user changes what they have, they will be prompted to re-enroll (if self-enrollment is enabled) or will be locked out of their account until Duo is disabled (if self-enrollment is disabled or if you have exceeded your number of user licenses in Duo).
Changing this option will not remove old ids from the Duo admin panel.