Crowd Two Factor Authentication (2FA) – Premium

Crowd Two Factor Authentication (2FA/MFA) gives the ability to enable 2FA/MFA for Crowd which adds a security layer on top of user login. Crowd Servers are compatible with all Authenticator Apps including Mobile Authenticator and Google Authenticator. Here we will go through a guide to configure Crowd 2FA/Crowd MFA. By the end of this guide, Crowd users should be able to perform Crowd Two Factor Authentication (2FA) on top of user login.

Pre-requisites

To configure Crowd Two Factor Authentication, you need the following items:

  • Crowd should be installed and configured (supported version Crowd Server 3.7.0 and above).
  • Admin credentials are set up in Crowd.
  • Valid Crowd Server Licence.

Download And Installation

  • Log into your Crowd instance as an admin.
  • Navigate to the settings menu and Click Manage Apps.
  • Click Find new apps or Find new add-ons from the left-hand side of the page.
  • Locate Two-factor Authentication(2FA), Crowd 2FA via search.
  • Click Configure to get into and configure the plugin.
    Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA

Step 1: Setup miniOrange 2-Factor Authentication

  • Navigate to Two Factor Settings tab.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd Two Factor Settings Tab
  • Enable Crowd 2FA: For Enabling 2FA for users click on 'Enable the 2 Factor Authentication' for Crowd users & click on Save.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd Enable 2FA
  • Enable Crowd Backup Methods: For Enabling the Security Question or Backup Code as Backup Method in case of an emergency login, click on 'Enable Backup Method' and select 'Security Questions'(the User need to configure unique security questions) or 'Backup Code'(add-in will provide a set of one-time passcode)
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd Enable Backup Method
  • Allowing 2-Factor Authentication for users: For enabling 2FA for users in Crowd 2FA, navigate to 'User Management' tab, where you can see the list of all the active users, and all 2FA operations can be performed on these active users.

    Note: 2FA for all the users is disabled by default, you need to manually enable 2FA for all the users.

  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd User Managment Tab
  • 2FA for Users: Enter the name of the user in the Search Bar for whom you want to perform the operation and hit the search button, the user with that name will appear. And then in the Action column, select the required Action.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA for User
  • 2FA for Groups: Enter the name of the group in the Search Bar for which you want to perform the operation, and hit the search button, the group with that name will appear. And in the Action column, select the required Action.

    Note: In future, if users get added to this group, 2FA will be enabled for them by default.

  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods for single group

Step 2: How the user can Configure the 2FA

  • Welcome Message for users: The following screen will be shown to users after enabling 2FA for a particular user in the User Managment Tab of Crowd 2FA Application.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA Welcome Message
  • Configure the Mobile Authenticator app: Once the user clicks Next, the Mobile Authenticator setup screen will be shown. Where the user needs to scan the QR code or use the Secret Key and then enter the 6 digit OTP generated on mobile app.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA Configure Mobile Auth
  • Configure the Security Question: The below screen will be shown at the time of configuring Security Question as a 2FA method where the user needs to configure the Security Questions based on his knowledge. User can configure Security Question as a Primary as well as Backup method to login into Crowd.
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods KBA
  • Configure the Backup Code as Backup Method: If the Backup Code is activated as a Backup Method, the user will see the screen below where the user will see the list of one-time passcode.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA Backup Code

Step 3: Additional Features

  • Brute Force Configuration: It is used for restricting the access to your Crowd Application based on the number of Invalid Login Attempts for the specified period of time. For enabling Brute Force Configuration, click on the 'Enable Brute Force Protection for Crowd' checkbox, then select the number of invalid login attempts after which user will lock, and the time for which the user will be in a locked state and won't get access to Crowd application
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods brute force authentication
  • Mobile Authenticator Settings: Customized label can be given to the Authenticator app. Enter the 'Name' for your authenticator app in the text box.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA Mobile Authenticator Settings

Step 4: User Management

  • 2FA for Single User: Enter the name of the user in the Search Bar for whom you want to perform the operation and hit the search button, the user with that name will appear. And then in the Action column, select the required Action.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA For Single User
  • 2FA for Multiple Users: Select the users, in the Bulk 2FA Action drop-down list select the action you want to perform. And then hit Apply Button.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA For Multiple Users
  • 2FA for All Users: In Bulk 2FA Action Dropdown list under All users Section select necessary Action and hit Apply Button.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA For All Users
  • 2FA for Single Group: Enter the name of the group in the Search Bar for which you want to perform the operation and hit the search button, the group with that name will appear. And then in the Action column, select the required Action.
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods enable single group
  • 2FA for Multiple Groups: Select the Groups, in the Bulk 2FA Action drop-down list select the action you want to perform. And then hit Apply Button.
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods enable multiple group
  • 2FA for All Groups: In Bulk 2FA Action Dropdown list under All groups Section select necessary Action and hit Apply Button.
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods enable all group

Step 5: IP Restrictions

  • IP Whitelisting: It is a security feature that is often used for trusted users who can directly log into Crowd without asking for 2FA. Enter the IP address and click save for enabling the IP whitelisting
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods IP whitelisting
  • IP Blocking: It is a basic access control mechanism that blocks access to Crowd Application based on the IP address. It will deny access for those IPs which are listed here. Enter the IP address in the text box for IP blocking. The message for this blocked users can be customized, enter the message in the 'Blocked User Message' text box and click on save button.
  • Setup Two Factor (2FA / MFA) Authentication for Crowd using OTP, KBA, TOTP methods IP blocking

Step 6: Reconfigure 2FA

  • Reconfigure 2FA: For reconfiguring 2FA for end-user, navigate to Top Navigation Bar click on Two-factor Authentication, you can see the Configure Two Factor(2FA) window, now click on Reset button to Reconfigure the Authenticator or Backup method.
  • Setup Two Factor Authentication (2FA / MFA) for Crowd using OTP, Mobile Authenticator, KBA, TOTP methods, Backup Method, MFA and OTP over Email/SMS. Provides Additional Security Layer. Crowd 2FA Reconfigure 2FA


Our Other Apps: SAML SSO Apps | OAuth Apps | 2FA Apps | Crowd Apps | REST API Apps | Kerberos/NTLM Apps | User Sync Apps |
                             Bitbucket Git Authentication App | Jenkins SSO | SonarQube SSO

If you are looking for anything which you cannot find, please drop us an email on info@xecurify.com

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com