2-Factor-Authentication

This plugin allows you to add an extra layer of security to your account login by requiring a one-time code—generated on your smartphone or tablet—in addition to your password. Only re-logging in after a session has expired in a browser window where the CCM19-backend is still open is exempt from entering the code.

The plugin must be activated by the administrator in the plugin-management section of the On---Premise-editions and enabled for users.

Enable functionality

Log in to CCM19 and open "Account Settings" via the user menu in the top right corner.

At the bottom, click on “2--Factor-Enable authentication with a smartphone-app.” If this button is missing, the plugin is not active or has not yet been enabled for you.

After clicking the button, a configuration screen will open displaying a randomly generated key and a QR-code.

Install an authentication-app on your smartphone, if you don’t already have one. The introductory text of the form includes links to a selection of supported apps.

The following demonstrates the process using the “Aegis Authenticator” app (available in the Google Play Store and the F-Droid Store). The process is largely similar in other apps.

Open the authentication-app on your smartphone and scan the QR-code. If you have the CCM19-backend open directly on your smartphone, double-tap the QR-code instead.

The app should automatically import the necessary parameters by scanning the code. If that doesn’t work, you can also manually transfer the data from the left pane next to the QR-code.

Finally, tap "Save." You should now see a 6---digit code that changes every 30 seconds.

Enter the generated code in the "Sign-in code" field and then click "Activate." You have approximately 30 seconds to click the button after the code in the app has changed.

If the code was entered correctly, a message will appear: “2---factor-authentication successfully activated.”

After that, you will need a current login code from your app for every time you log in to CCM19.

Disable functionality

Log in to CCM19 and open “Account Settings” via the user menu in the top right corner.

At the bottom, click on “Disable 2---factor-authentication with a smartphone-app.”

Enter a current sign-in code from your app and then click “Deactivate.”

If everything worked, a message will appear stating “2---factor-authentication successfully deactivated.” You no longer need a sign-in code to log in to CCM19.

What can I do if I no longer have access to the app?

If you can no longer generate login codes, use the “Forgot your password?”-function in the CCM19 login window.

You will then receive an e-. Follow the instructions in the email to set a new password. Upon receiving the new password, two---factor-authentication will also be reset.