Administration

Two-factor sign-in by e-mail code

Additionally secure sign-in to the administration with a code that arrives by e-mail.

EasyUC · Version 4.8.7

In EasyUC: EasyUC Cisco → Administration → System & Operations → System Configuration → 2FA

What it is for

With two-factor sign-in, the password alone is no longer sufficient. After the user name and password have been entered, EasyUC sends a six-digit code to the e-mail address of the account. The sign-in is complete only with this code.

The setting is a single switch for the entire installation. A code is valid for 15 minutes and allows five entry attempts at most. The server enforces the second step: without a valid code, the administration accepts no further requests from the account.

Prerequisites

The owner account (ROLE_OWNER). The server rejects the change for other accounts.
The license includes the scope Enduser. Without it, the page shows no switch.
E-mail delivery is set up and checked with a test e-mail.
Every EasyUC account has an e-mail address that its holder can read.

Step by step: switching on two-factor sign-in

Under Administration → Access & Appearance → Administrators & Roles, check that every account has a valid e-mail address.
Send a test e-mail under Administration → System & Operations → System Configuration → SMTP Configuration.
Open Administration → System & Operations → System Configuration → 2FA.
Read the note: this function enables two-factor authentication for all users.
Switch on Enable.
Click Save. The message 2FA Settings modified confirms the change.
Leave your session open and sign in with a test account in a second browser window.
On the page Check 2 Factor Authentication Code, enter the code from the e-mail in the field Code and click Sign In.

Fields and options

Fields and options
Field / action	Meaning and use
Enable	On: every sign-in to the administration additionally requires the e-mail code. Off: sign-in with user name and password only. Default: off.
Code (sign-in page)	Six-digit code from the e-mail. Valid for 15 minutes, five attempts per code at most.
Back (sign-in page)	Cancels the sign-in and returns to the sign-in page. A new sign-in generates a new code.

Checking the result and narrowing down errors

Success: after the user name and password, the page Check 2 Factor Authentication Code appears and an e-mail with the code arrives.
Message Code is not valid: the code is wrong, expired or used up. Click Back and sign in again.
No e-mail arrives: check the SMTP configuration with Send Test E-Mail and the e-mail address of the account.
The page 2FA shows no switch: the license does not include the scope Enduser.
Switch the function on only from a session that you leave open until the test with a second account has succeeded.
This setting does not apply to the end-user portal. Its second sign-in step is controlled separately.