Authentication Providers
News Suite supports various authentication providers and authentication mechanisms.
Built-in authenticators
Section titled “Built-in authenticators”We have the following authentication mechanisms:
Multi-factor authentication (MFA)
Section titled “Multi-factor authentication (MFA)”MFA can be configured by the user from their profile menu. It will be required on initial login (when logging in with username and password), and whenever a cookie-based login requires elevated access, such as to the Admin section.
You can monitor user’s MFA settings from the Users list to make sure your users are enabling MFA.
To require MFA from all users, go to Administration → Users & Roles → Authentication settings, check Enable campaign for multi-factor authentication (MFA) setup and set a deadline. Until the deadline, users without MFA or a passkey are reminded and can snooze the reminder. From the deadline on, they must set up MFA or a passkey before they can continue. Users signing in through Microsoft or Google are not affected. While the campaign is enabled, users are also asked for their contact details, which are used to verify their identity when they set up MFA.
Users can use any authenticator app they wish. See Multi-Factor Authentication for the user guide, including how to choose an authenticator app.
PassKeys
Section titled “PassKeys”Users can add a passkey to their account from the profile menu. This allows them to login or elevate their access by using biometric technologies such as Touch ID, Face ID, Windows Hello, USB drive, or others.
Third-party authentication
Section titled “Third-party authentication”We support any OAuth 2.0 authentication providers that you wish to use. By default, Microsoft and Google are available out of the box.
You can manage enabled providers by going to the Administration menu, Users & Roles page, then click on the arrow next to Manage roles and then choose Authentication providers