Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-79920

Authentication: MFA - Improve user factor setup

XMLWordPrintable

    • MOODLE_404_STABLE
    • MDL-79920-main
    • Hide

      Setup

      Before proceeding, ensure you can receive emails sent via Moodle as you may be required to verify yourself when logging in when MFA is enabled. You can do it by setting up Mailpit

      1. Log into Moodle as admin.
      2. Go to Site admin -> Plugins -> Admin tools -> Multi factor authentication
      3. Enable 'MFA plugin enabled'
      4. In the factor table, enable the following factors:
        • Email
        • Authenticator app
        • Security key
      5. Press 'Save changes'

      Test authenticator app

      1. Go to your user preferences page
      2. Click on 'Multi-factor authentication preferences'
      3. CONFIRM that the Authenticator app card has a 'Set up' button
      4. Click on the 'Set up' button
      5. Set up the factor using the instructions.
      6. After successful setup, CONFIRM that the button on the Authenticator app card now reads 'Manage'
      7. Click on the 'Manage' button
      8. CONFIRM you see a table with your factor listed and two buttons, 'Replace' and 'Remove'
      9. Click on 'Replace'
      10. CONFIRM you see a modal window popup with a message about replacement.
      11. Click the 'Yes, replace' button.
      12. CONFIRM you see a heading saying 'Replace authenticator app'.
      13. Set up the factor again using a different device name.
      14. After successful replacement, click on the 'Manage' button again for Authenticator app.
      15. CONFIRM that your new factor is listed and that your old one has been removed.
      16. Click on the 'Remove' button
      17. CONFIRM you see a modal window popup with a message about removing the factor.
      18. Click on the 'Yes, remove' button.
      19. CONFIRM you now see a 'Set up' button again for Authenticator app.

      Test security key

      1. Go to your user preferences page
      2. Click on 'Multi-factor authentication preferences'
      3. CONFIRM that the Security key card has a 'Set up' button
      4. Click on the 'Set up' button
      5. CONFIRM that the 'Save changes' button is disabled.
      6. Enter in a security key name.
      7. Click the 'Register security key' button and perform the necessary steps.
      8. CONFIRM that the 'Save changes' button is now enabled.
      9. After successful setup, CONFIRM that the button on the Security key card now reads 'Manage'
      10. Click on the 'Manage' button
      11. CONFIRM you see a table with your factor listed and two buttons, 'Replace' and 'Remove'
      12. Click on 'Replace'
      13. CONFIRM you see a modal window popup with a message about replacement.
      14. Click the 'Yes, replace' button.
      15. CONFIRM you see a heading saying 'Replace security key'.
      16. Set up the factor again using a different security key name.
      17. After successful replacement, click on the 'Manage' button again for Security key.
      18. CONFIRM that your new factor is listed and that your old one has been removed.
      19. Click on the 'Remove' button
      20. CONFIRM you see a modal window popup with a message about removing the factor.
      21. Click on the 'Yes, remove' button.
      22. CONFIRM you now see a 'Set up' button again for Security key.
      Show
      Setup Before proceeding, ensure you can receive emails sent via Moodle as you may be required to verify yourself when logging in when MFA is enabled. You can do it by setting up Mailpit Log into Moodle as admin. Go to Site admin -> Plugins -> Admin tools -> Multi factor authentication Enable 'MFA plugin enabled' In the factor table, enable the following factors: Email Authenticator app Security key Press 'Save changes' Test authenticator app Go to your user preferences page Click on 'Multi-factor authentication preferences' CONFIRM that the Authenticator app card has a 'Set up' button Click on the 'Set up' button Set up the factor using the instructions. After successful setup, CONFIRM that the button on the Authenticator app card now reads 'Manage' Click on the 'Manage' button CONFIRM you see a table with your factor listed and two buttons, 'Replace' and 'Remove' Click on 'Replace' CONFIRM you see a modal window popup with a message about replacement. Click the 'Yes, replace' button. CONFIRM you see a heading saying 'Replace authenticator app'. Set up the factor again using a different device name. After successful replacement, click on the 'Manage' button again for Authenticator app. CONFIRM that your new factor is listed and that your old one has been removed. Click on the 'Remove' button CONFIRM you see a modal window popup with a message about removing the factor. Click on the 'Yes, remove' button. CONFIRM you now see a 'Set up' button again for Authenticator app. Test security key Go to your user preferences page Click on 'Multi-factor authentication preferences' CONFIRM that the Security key card has a 'Set up' button Click on the 'Set up' button CONFIRM that the 'Save changes' button is disabled. Enter in a security key name. Click the 'Register security key' button and perform the necessary steps. CONFIRM that the 'Save changes' button is now enabled. After successful setup, CONFIRM that the button on the Security key card now reads 'Manage' Click on the 'Manage' button CONFIRM you see a table with your factor listed and two buttons, 'Replace' and 'Remove' Click on 'Replace' CONFIRM you see a modal window popup with a message about replacement. Click the 'Yes, replace' button. CONFIRM you see a heading saying 'Replace security key'. Set up the factor again using a different security key name. After successful replacement, click on the 'Manage' button again for Security key. CONFIRM that your new factor is listed and that your old one has been removed. Click on the 'Remove' button CONFIRM you see a modal window popup with a message about removing the factor. Click on the 'Yes, remove' button. CONFIRM you now see a 'Set up' button again for Security key.
    • 10
    • Team Hedgehog 2024 Sprint 1.1, Team Hedgehog 2024 Sprint 1.2, Team Hedgehog 2024 Sprint 1.3, Team Hedgehog 2024 Sprint 1.4

      Improve the workflow for users when they set up new authentication factors and manage existing ones. There is work to be done for both the UI presentation and the steps required to manage and setup factors.

      The UX prototype for improvements to the workflow have been completed and are linked in the requirements below.

      Requirements in scope for this issue:

      1. Update the user factor setup to use the cards and flow as per the  Figma prototype (last updated 1 Feb).
      2. Create the new manage page to display the factor setup.
      3. Update the "revoke" functionality wording to "remove", and update so that this feature is only available if at least one other factor is still enabled and configured by the user (so that you can't remove the last configured factor which would potentially lock you out). Note: Taking into account  the weight of factors (ie whether they are worth less than 100) is out of scope for this issue (so this requirement will simply be that you cannot remove a factor if it is the only one enabled and configured by the user).
      4. Add the "replace" feature, which allows a user to reconfigure a factor and replace the previous config (eg you could add a new hardware token, resulting in the previously configured one being removed). This requirement includes implementation of the confirmation modal from the prototype.
      5. Update the setup forms for relevant factors to match the prototype.
      6. Deprecate any strings that are no longer used (eg this could be relevant for all of the different calls to actions like "app setup" from the old setup buttons, which are replaced by the common language "setup" on the new cards UI).

        1. (1) 10 Passed -- (Main)MDL-79920.png
          (1) 10 Passed -- (Main)MDL-79920.png
          38 kB
        2. (1) 12 Passed -- (Main)MDL-79920.png
          (1) 12 Passed -- (Main)MDL-79920.png
          52 kB
        3. (1) 15 Passed -- (Main)MDL-79920.png
          (1) 15 Passed -- (Main)MDL-79920.png
          42 kB
        4. (1) 17 Passed -- (Main)MDL-79920.png
          (1) 17 Passed -- (Main)MDL-79920.png
          39 kB
        5. (1) 19 Passed -- (Main)MDL-79920.png
          (1) 19 Passed -- (Main)MDL-79920.png
          77 kB
        6. (1) 3 Passed -- (Main)MDL-79920.png
          (1) 3 Passed -- (Main)MDL-79920.png
          61 kB
        7. (1) 6 Passed -- (Main)MDL-79920.png
          (1) 6 Passed -- (Main)MDL-79920.png
          64 kB
        8. (1) 8 Passed -- (Main)MDL-79920.png
          (1) 8 Passed -- (Main)MDL-79920.png
          40 kB
        9. (2) 3 Passed -- (Main)MDL-79920.png
          (2) 3 Passed -- (Main)MDL-79920.png
          50 kB
        10. (2) 5 Passed -- (Main)MDL-79920.png
          (2) 5 Passed -- (Main)MDL-79920.png
          47 kB
        11. 10 passed.png
          10 passed.png
          88 kB
        12. 1 passed.png
          1 passed.png
          29 kB
        13. 2 passed.png
          2 passed.png
          75 kB
        14. 3 passed.png
          3 passed.png
          75 kB
        15. 4 passed.png
          4 passed.png
          86 kB
        16. 5 passed.png
          5 passed.png
          47 kB
        17. 6 passed.png
          6 passed.png
          66 kB
        18. 7 passed.png
          7 passed.png
          73 kB
        19. 8 passed.png
          8 passed.png
          48 kB
        20. 9 passed.png
          9 passed.png
          63 kB
        21. access.png
          access.png
          35 kB
        22. balance.png
          balance.png
          46 kB
        23. icons and cards styling.png
          icons and cards styling.png
          101 kB
        24. issue_mfa.png
          issue_mfa.png
          21 kB

            david.woloszyn@moodle.com David Woloszyn
            matt.porritt@moodle.com Matt Porritt
            Safat Shahin Safat Shahin
            Huong Nguyen Huong Nguyen
            Kim Jared Lucas Kim Jared Lucas
            Votes:
            0 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 0 minutes
                0m
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 week, 4 days, 5 hours, 2 minutes
                1w 4d 5h 2m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.