mO Two Factor Authentication (2FA) for Crowd

The add-on is now fully compatible with Crowd v7.x.x, ensuring seamless functionality and improved stability with the latest Crowd Data Center version.

Improvements:

• Enhanced the one-time 2FA validation functionality to improve security.
• Updated third-party libraries.

Bug Fixes:

• Minor bug fixes & UI enhancements for better user experience.

Improvements :

• Updated third-party libraries to their latest patched versions to resolve known vulnerabilities and enhance overall plugin security.
• We have added a Knowledge Base page to provide a unified view of all our documentation resources, including the setup guide, setup video, demo videos, use case articles, and the handbook.

Bugfix

• Minor bug fixes and UI/UX enhancements.

• External libraries with identified vulnerabilities in the plugin have been upgraded to their latest patched versions.
• Resolved redirection issues.
• Minor bug fixes and small UI/UX enhancements.
• Fixed minor issues related to YubiKey Hardware Token

New Features:

• Restrict 2FA Methods by Group: Enable different 2FA methods to specific user groups.
• Email Notifications for 2FA Resets: Added option to notify end users via email when an admin resets their 2FA.
• Dynamic Redirection: Redirect users based on the accessed URL instead of a predefined base URL in Crowd.
• Phone Number Search: Added phone number-based search in the user management tab for OTP over SMS.

Improvements:

• IPv6 Support: Added IPv6 compatibility for IP restrictions.

Bug Fix:

• Addressed minor security and UI issues.

New Features:

• Added option to enable 2FA based on user directories.
• Added support for configuring a custom mail server for sending emails via the 2FA plugin.
• End users can now customize the duration for which their device is remembered.
• Added support for tracking administrative activities related to the 2FA plugin in the audit logs.
• Added option to provide flexibility by allowing admins to choose specific activities to monitor in the audit logs.

Bug Fix:

• Fixed a few redirection issues.

Made the add-on compatible with Crowd v6.x.x

• Improved Authentication for Email Servers.
• Improvements in Common Passcode across all applications.
• Added support for customizing security questions.
• Improved Skip 2FA on SSO functionality.
• Added security improvements.

• Improved Authentication for Email Servers.
• Improvements in Common Passcode across all applications.
• Added support for customizing security questions.
• Improved Skip 2FA on SSO functionality.
• Added security improvements.

• Improved the User Interface of the plugin configuration pages
• Added troubleshooting tab support in the ‘Access to 2FA pages to non-admin users’ feature
• Made plugin pages more responsive to large usernames and emails – user management page, audit logs page, and all end users' pages.

• Improved the User Interface of the plugin configuration pages
• Added troubleshooting tab support in the ‘Access to 2FA pages to non-admin users’ feature
• Made plugin pages more responsive to large usernames and emails – user management page, audit logs page, and all end users' pages.

• Added Pagination on the User Management tab of plugin
• Resend OTP option support for OTP over SMS feature
• Bugfixes and UI enhancements

• Added Pagination on the User Management tab of plugin
• Resend OTP option support for OTP over SMS feature
• Bugfixes and UI enhancements

New features

• Added multilingual support: End users can choose their preferable language
• Added functionality to send alert email to blocked users after Brute force attempt
• Added search users by email option

Improvements/Fixes

• Added missing events in Audit logs
• Increased the OTP validity duration for OTP over Email method
• Added access checks on 2FA reconfiguration page

New features

• Added multilingual support: End users can choose their preferable language
• Added functionality to send alert email to blocked users after Brute force attempt
• Added search users by email option

Improvements/Fixes

• Added missing events in Audit logs
• Increased the OTP validity duration for OTP over Email method
• Added access checks on 2FA reconfiguration page

We are happy to announce the release of the plugin's advanced version, which includes support for broad range of Authentications methods and advanced security features.

The plugin comes with a 2-month trial period, allowing you to experience its full capabilities before making a decision.

New 2FA methods added in this version:

• OTP over SMS and Email
• Yubikey Hardware Token
• WebAuthn(FIDO2)
• Duo Push Notification
• Security Questions(KBA)

Exclusive features added to this version:

• Enable 2FA based on groups
• Remember 2FA on my device
• Brute Force 2FA Protection
• IP Whitelisting & Blocking
• Skip 2FA on SSO
• Record 2FA Audit logs
• Change look and feel of all 2FA user facing pages
• Group based plugin access to non-admins

We are happy to announce the release of the plugin's advanced version, which includes support for broad range of Authentications methods and advanced security features.

The plugin comes with a 2-month trial period, allowing you to experience its full capabilities before making a decision.

New 2FA methods added in this version:

• OTP over SMS and Email
• Yubikey Hardware Token
• WebAuthn(FIDO2)
• Duo Push Notification
• Security Questions(KBA)

Exclusive features added to this version:

• Enable 2FA based on groups
• Remember 2FA on my device
• Brute Force 2FA Protection
• IP Whitelisting & Blocking
• Skip 2FA on SSO
• Record 2FA Audit logs
• Change look and feel of all 2FA user facing pages
• Group based plugin access to non-admins