1
edit
IAM/Frequently asked questions: Difference between revisions
→Q: Why do you support email login ("passwordless") if it's less safe than other methods?: Conjugate properly a verb
m (Fix typo) |
(→Q: Why do you support email login ("passwordless") if it's less safe than other methods?: Conjugate properly a verb) |
||
| (3 intermediate revisions by 2 users not shown) | |||
| Line 27: | Line 27: | ||
Sometimes all you want to do is post a comment on a public forum. For that, we often need to provide a valid identity, but we also want to make it as easy as possible for you to contribute. | Sometimes all you want to do is post a comment on a public forum. For that, we often need to provide a valid identity, but we also want to make it as easy as possible for you to contribute. | ||
Email login ("passwordless") is our current solution for this use case. Some applications we provide may not provide this login method, for example when the application | Email login ("passwordless") is our current solution for this use case. Some applications we provide may not provide this login method, for example when the application requires more secure methods. | ||
==== '''Q''': ''I would like access to specific groups, such as the NDA group, but it requires me to use a different login method, why?'' ==== | ==== '''Q''': ''I would like access to specific groups, such as the NDA group, but it requires me to use a different login method, why?'' ==== | ||
| Line 57: | Line 57: | ||
You can find a link to our public discussion board here: https://github.com/mozilla-iam/mozilla-iam/#discussion | You can find a link to our public discussion board here: https://github.com/mozilla-iam/mozilla-iam/#discussion | ||
==== '''Q''': ''How do I create a Non-Staff Mozillians Account that will work for SSO ==== | |||
To be able to be added to access groups in Mozillians, your Mozillians account must be associated with a supported login identity. | |||
A Mozillians account must be associated with one of the following login identities with multi-factor authentication enabled to be added to access groups. | |||
Mozilla LDAP (required during set-up) | |||
* Firefox Accounts | |||
* GitHub | |||
* Google | |||
1. If you don't already have an account with a supported login identity, create one by following the instructions from the provider | |||
2. Enable 2FA/MFA authentication | |||
If you set up 2FA on GitHub then you '''must select GitHub''' when creating your Mozillians account. If you set up 2FA on you Firefox account then you must select Firefox when creating your Mozillians account. | |||
If your email account is provided by Google we recommend setting up 2FA in your Google account settings. If you don't want to set up 2FA on your Google account itself you can still use this address to create a GitHub or Firefox Account with 2FA enabled. | |||
==== Sign-up For Mozillians ==== | |||
To keep things simple, it is very important that when creating your Mozillians account you choose the login method that has 2FA/MFA associated with it. If you set up 2FA/MFA on GitHub or Firefox Accounts do not select Google when logging in. | |||
Go to mozillians.org | |||
Click on Log in / Sign up | |||
Select the identity type that has 2FA/MFA enabled. DO NOT type your email into the "Log In or Sign Up with email" box. | |||
Remember, if you set up 2FA on your GitHub account then you must select GitHub when creating your Mozillians account. | |||
Fill out the required fields and click the button to Complete Registration | |||
Note: content blockers, including Firefox's built in settings, may hide the captcha. Ensure all the required fields are visible to be able to complete registration. | |||
==== '''Q''': ''How can I set up two-factor authentication (2FA) for my github account, using an app on my phone (Android/iOS/Blackberry)?'' ==== | ==== '''Q''': ''How can I set up two-factor authentication (2FA) for my github account, using an app on my phone (Android/iOS/Blackberry)?'' ==== | ||
| Line 277: | Line 310: | ||
==== '''Q''': ''Auto-fill does not work with my password manager.'' ==== | ==== '''Q''': ''Auto-fill does not work with my password manager.'' ==== | ||
We tested the most common password managers successfully. In this case please reach out to us via the [https://discourse.mozilla.org/c/iam IAM Discourse] category and let us know which password manager you use. | We tested the most common password managers successfully. In this case please reach out to us via the [https://discourse.mozilla.org/c/iam IAM Discourse] category and let us know which password manager you use. | ||
==== '''Q''': ''I'm using the Slack app (or another app) and it only lets me login with a specific method (such as Firefox)'' ==== | |||
The Slack app does not let you use the back button when it tries to automatically login to SSO. If you had auto-login enabled, you also cannot force a logout as it's not within your web-browser. | |||
This is a limitation of the app. In order to avoid this, you can make sure that you do not check automatic login. Otherwise, you can also delete the application's settings on your system and start the application again. | |||
For Slack on macOS the settings are in <code>~/Library/Application Support/Slack</code> - deleting this directory and restarting the Slack app will let you login normally again. | |||