Identity Manager 8.1.5 - Web Application Configuration Guide

Table 10: Configuration parameter for multi-factor authentication
Configuration parameter	Description
VI_Common_RequiresAccessControl	Requires authentication for web applications.
VI_Common_AccessControl_StarlingEnabled	Enables use of Starling Two-Factor Authentication.

Multi-factor authentication is done in the web project in the Web Designer.

To set up Starling Two-Factor Authentication

Open the Web Designer.
Open a module and search for "VI_Common_RequiresAccessControl".
Mark the configuration parameter "VI_Common_RequiresAccessControl" and set the value to true.
Mark the configuration parameter "VI_Common_AccessControl_StarlingEnabled" and set the value to true.

Table 11: Configuration parameter for multi-factor authentication for specific people
Configuration parameter	Description
VI_Common_AccessControl_Filter	Sets up multi-factor authentication for specific people.

You need to specify, which people can use multi-factor authentication in your web project.

To set up Starling Two-Factor Authentication only for specific people

Open the Web Designer.
Open a module and search for "VI_Common_AccessControl_Filter".
Mark the configuration parameter "VI_Common_AccessControl_Filter".
Enter a filter condition in the node editor view that only matches people who require multi-factor authentication.

Table 12: Configuration parameter for logging in without multi-factor authentication
Configuration parameter	Description	Setting
Configuration parameter	Description	True	False
VI_Common_AccessControl_Starling_AllowUnregistered	Allows users to log in to the web application without multi-factor authentication.	Users without a registered Starling 2FA token can log in to the web application without Starling Two-Factor Authentication.	Users without a registered Starling 2FA token cannot log in to the web application.

You can configure your web project to allow users without multi-factor authentication to log in to the web application.

To log in without Starling 2FA tokens

Open the Web Designer.
Open a module and search for "VI_Common_AccessControl_Starling_AllowUnregistered".
Mark the configuration parameter "VI_Common_AccessControl_Starling_AllowUnregistered".
Set the value in the node editor view to true.

On the API Server, you can enable Starling 2FA for the Operations Support Web Portal.

To enable Starling Two-Factor Authentication for the Operations Support Web Portal

Start the API Designer.
Click on View | Navigation on the menu bar.
Click API projects in the navigation.
In the tree view, double-click on the QBM_OperationsSupport project.
In the definition tree view, right-click Authentication node.
In the context menu, click Object in extension | Add to extension <extension name> | Authentication module.
Click on View | Node editor on the menu bar.
In the definition tree view, click the newly created Second authentication factor.
In the Node editor pane, tick the Second authentication factor box.
In the menu, click Starling 2FA.