Your own ID-Server
On premise installations of SecSign ID offer the flexibility to connect with your preferred servers, services, and devices. And you can customize the SecSign ID with your own organization’s branding.
Learn MoreSecSign ID Plugin: Nextcloud
2019-06-12
15 minutes to read
Tutorial Index
Two-Factor Authentication with SecSign for Nextcloud
This tutorial describes how to set up the SecSign ID Plugin for your Nextcloud Setup to increase login security.
Integration
Integration of the plugin into your setup
edit the settings to change the integration
Authentication
2FA
2FA blind
2FA no AP
2SA
2SA no AP
2SA blind
OTP
Enrollment
Custom ID
Pattern
IDP Custom Website
IDP Email Enrollement Code
Enrollment initiated by SP
Enrollment with IDM
Overview and first steps
Overview and first steps
Use the SecSign ID two factor authentication app with your NextCloud installation for an easy to use and highly secure user login available on most platforms.
SecSign ID is a plugin for real two-factor authentication (2FA) for Nextcloud. 2FA adds another layer of security to your installation by using a second token. In this case the physical token is your smartphone.
If you want to secure your Nextcloud setup with SAML, for example to offer a convenient and secure 2FA SSO for your users, have a look at our Nextcloud SAML tutorial.
Questions? Feel free to get in touch with us if you need help setting up your SecSign ID app or to request a plugin for a not yet supported environment
Installation
Plugin Installation
In order to enable the SecSign ID plugin, please log in to NextCloud as an admin and navigate to Apps, choose the category Security and look for SecSign ID by SecSign Technologies Inc.
Then simply press install and enable to complete the installation.
On-premise server
On-premise server setup
If you are using a SecSign ID on-premise server setup, you need to enter the server address. You can do so in the settings tab “Configuration”.
Activation
Activate 2FA
To enable 2FA for your account, go to your personal settings and navigate to the category Security.
Before activating SecSign 2FA, make sure to generate and securely store a set of backup codes, to make sure you are never locked out of your system.
Once this has been done, scroll to the section SecSign 2FA and enter your SecSign ID to assign it to your account and enable 2FA.
By default, non-admin users cannot edit their SecSign 2FA settings themselves.
User configuration
User configuration
By clicking on the SecSign Icon in your navigation bar, you can navigate to the app settings. Here you can decide on the rights of your users and enable or disable SecSign 2FA for your users.
This section is also where you can find user onboarding and server settings. User onboarding allows you to create a SecSign ID for your users in a simple and quick onboarding process.
Login
How to log in
To log in using SecSign 2FA follow these steps:
- Enter your username and password as usual
- Choose SecSign 2FA (not necessary if no other 2FA providers are enabled)
- Authenticate yourself by using the SecSign ID App on your phone and pressing the same access pass that is shown to you in your NextCloud login.
Troubleshooting
Troubleshooting
With NextCloud 15, enforcing 2FA for all users or users of specific groups has become an option. Beware that users with no SecSign ID set up will not be able to log in if this setting is activated.
If a user is ever locked out, admins can use the occ command line tool to disable 2FA for a specific user.
If there are any issues regarding the authentication via the SecSign ID app, feel free to contact us at support@secsign.com
