authentication

New in 1.0.4: Login Guard Eggy Login Log now includes Login Guard, a new optional security and account recovery system introduced following customer feedback. Login Guard can detect excessive failed login attempts against individual accounts or IP addresses and automatically notify...

XenForo already supports connected-account login. Setting it up is the annoying part. Eggy Connected Account Assistant turns the setup of Google, Apple, Microsoft, GitHub and Facebook login into a guided Admin CP process. Instead of working through provider documentation, OAuth terminology and...

Telegram Connected Account To authenticate via the bot, you need to set up a Webhook handler - Auth bot. You need to specify the Domain (web login) for the bot (Auth bot) in BotFather. The bot can be added to a Telegram group and will prompt you to log in (ban)...

I'm trying to make an authentication SPI which loads a custom ftl in which the username is provided, depending on whether the user is registered or not, it goes to login or register. This step works as it should, for this I make a context switch and load the corresponding ftls, the login makes...

Hi there, Just interested if there is some way I could use Xenforo as an OAuth2 service and make it the central way to have all user accounts across all my different apps and services. An example for some people.. 1. On an external website, the login button will redirect you to the Xenforo page...

Will Xenforo Support Azure AD Pass-through Authentication.

HI we want to check which protocols are supported by xenforo. we are primarly looking at pass-through authentication to seamlessly integrate into our app does it support Oauth 2.0 protocol

More info here: https://developer.apple.com/sign-in-with-apple/ and here: https://developer.apple.com/documentation/signinwithapplejs Attract more users by allowing Sign In via Apple ID.

Hi there, I have an external PHP site that I would like to integrate with XenForo. It would be nice if XenForo could use the database that I already have (passwords stored with bcrypt), by being told which fields to lookup for certain functions. For example, IPB (Invision) offers this...

As many web browser vendors (including Google Chrome, Firefox, and Microsoft Edge) are pushing forward for the support of the Web Authentication API (WebAuthn), it would be good to experiment with a more secure and less frustrating password-less authentication experience using asymmetric...

Duo is a well respected two-factor authentication provider. Please add support for Due to Xenforo. https://duo.com/docs/duoweb contains documentation, including GitHub php library for easy integration.

Details for this enhancement request.... Feature list (This will be updated with suggestions as people add them): Multiple Authentication Methods... Support authentication using LDAP/LDAPS, Kerberos, or local DB (LDAP/LDAPS is highly desired for compatibility with multiple platforms.)...

Hi There, I'm hoping to learn more about how Xenforo handles passwords and authentication and etc... real newbie when it comes to databases but I thought I'd ask for some insights anyways. I'm hoping to use the same database that xenforo is on with my "datingscript.com" website. It looks...

I did a conversion from IPB 3.4 to XenForo and found that a percentage of members were unable to authenticate on their first login attempt. But, many users could authenticate fine. Took a while to figure out, but, the information on how passwords are treated in IPB is explained here...

Hello all, After looking around on the forums, I found this thread discussing LDAP and Active Directory. However, seeing as the thread was from 2011, I thought it better to make my own thread instead of necro-ing the other one. That being said, I am trying to use LDAP to enable Single Sign-On...

Hello, is it possible to configure XenForo so that the default registration is disabled, but an external service can tell XenForo to send someone an email with some sort of registration link. Directly creating an account and sending a randomized password that should (or preferably has to) be...

Hello all, Firstly, when setting up Google authentication for my site, crystalcraftmc.com, I followed the official guide provided by the XenForo team. A month or two ago, a user contacted me saying that they were no longer able to log into the site with Google, and they were presented with...

Hello, Today, my 30 days finally expired on my login using my 2FA key. When I was initially setting up my 2FA authentication, my phone could not scan the QR code on my screen to add it (I am using Authy over Google Authenticator). This was strange, seeing as it worked here on the XF Forums, but...

I am using symfony2 as my main application, the session is stored inside redis. I am wondering how simple is it to roll my own authentication strategy? Would I be able to pull in the session from redis fairly easy and tell XenForo to return true? Can anyone provide some examples, insights, or...