Two Factor Authentication

Two factor authentication (2FA) is a secondary layer of security to protect developer account sign up and login to systems. A verification code is sent through SMS and/or email to be used each time a developer logs in to a ClearBlade account.

Admin Account

2FA can be enabled and set up under the ‘Security’ tab in the ‘Admin Management’ page for the systems of the admin accounts.

Security

Setting	Description
Require Two Factor Auth	When the checkbox is checked, 2FA is required for all developer accounts in the instance
Dev Token TTL	The time period for which the developer token is valid

Click ‘Configure’ to open the communication modules.

Make sure to click ‘Update’ to save changes.

Email Communication

Setting	Description
Protocal	We only support SMTP at this time
Encryption Type	Choose an email communication encryption protocol
Host	Domain name that contains the SMTP server (such as smtp.gmail.com)
Port	A list of common SMTP ports is provided to choose from. Port 587 is recommended to use as a default port, as most SMTP servers can use this port
Username	The SMTP email address being used to send the validation email
Password	The login password for used for the SMTP email account
From Email	The email address that the email will be sent from
Validation Subject	Validation email subject line
Validation Message	Validation email body message. There will be a default message if this field is left blank. $LINK will be replaced with the generated validation link. HTML is supported.
Two Factor Subject	The subject line when sending emails with login codes to developers
Two Factor Message	The message in the body of the email when sending emails with login codes to developers. There will be a default message if left blank. $CODE will be replaced with the generated login code. HTML is supported.

SMS Communication

Setting	Description
Service Name	We only support Twilio at this time
URL	URL of the messaging service
Username	Account SID
Password	Authentication token
From Number	The phone number that the message will be sent from
Validation Message	Validation text body message.$LINK will be replaced with the generated validation link. There will be a default message if this field is left blank.
Two Factor Message	The message in the body of the text when sending messages with login codes to developers. $CODE will be replaced with the generated login code. There will be a default message if this field is left blank.

Appearance and other tools

Communication information should appear in the appropriate sections

Setting	Description
Configure	Opens the communication’s settings module
Test	Sends test email/sms message
Delete	Deletes the communication settings

Developer Account

If Two Factor Auth is enabled at the Admin level then the settings cannot be overidden in the Devoloper level

Dev accounts can enable 2FA for their individual account login by marking the ‘Enable Two Factor Auth’ checkbox in ‘Account Settings’ under the username. Users need to make sure the method(s) of their choice is validated before updating the 2FA settings. There is an option to validate methods by clicking ‘Send Validation Email (or Text)’

Setting	Description
Enable Two Factor Auth	When the checkbox is checked, 2FA is required for logins and sign ups on Developer’s system
Default Two Factor Method	Choose to have the authentication code sent to a validated email, SMS, or both
Two Factor Email	An email must be validated before it is able to receive a login code. Validation status appears next to the email address. There is an option to send a validation email.
Two Factor Phone	A phone number must be validated before it is able to receive a login code. There is an option to send a validation email. Validation status appears next to the number. There is an option to send a validation text.

Make sure to click ‘Update Settings’ to save changes.

Login code becomes invalid after the first failed login attempt. After the code is resent 3 times, the developer will have to re-attempt the login process.

If the default validated 2FA method (email/phone number) is removed, the account will be disabled and the developer will be locked out of the account.