site.ini [SignInSecondFactorSettings] #

The block [SignInSecondFactorSettings] of settings/site.ini, with 2 setting(s).

Never edit settings/site.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/site.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/site.ini.append.php for one siteaccess,
• extension/<extension>/settings/site.ini.append.php in an extension (read when the extension is active).

Handlers #

The second sign-in step on the paths that check a password without the web login form:
the REST interface with basic authentication, WebDAV, SOAP and the expservices login.
A two-step sign-in extension (sevenx_authentication_2fa) adds its class here; it then
decides whether a password alone is enough for an account, and which app passwords
(made by the user on the extension's setup page) sign in instead. Without a class
nothing changes. Console commands are never asked.
Guide: doc/eng-us/features/6.0/second-factor-on-other-sign-in-paths.md

Classes implementing expSignInSecondFactorHandler (the extension's settings add theirs).

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[SignInSecondFactorSettings]
# an empty "Handlers[]" first replaces the shipped list; without it the items are added
Handlers[]
*/ ?>

CodeHeader #

The request header that carries the code of an authenticator app, where the extension
accepts one (the expservices login also reads the POST field otp).

Default: X-Exp-OTP.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[SignInSecondFactorSettings]
CodeHeader=X-Exp-OTP
*/ ?>

Related #

• All blocks of site.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/site.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.