Emmanuel_N

In-Webo Technologies provides a Strong Authentication as a Service solution that makes authentication process altogether secure, simple and affordable to any website.
If you publish a website where “member access” or “user accounts” are protected by a password, our solution enables: 
 * To replace password authentication by a multi-factor authentication making connection to any website super easy and yet, more secure 
 * To prevent users from remembering additional login and passwords or having to use password recovery methods as a standard way to access to your service 
 * To integrate a user-centric, multi-browser, mobility-ready and free access control service
The first step to using InWebo solution is to create your InWebo account on our self-service platform: https://www.myinwebo.com/signup/3
<h3>Prerequisites</h3>
Before installing and configuring the plugin, you need to create a Web Services API PEM certificate for the InWebo service that will manage the access to your site: 
 * Signup to create your InWebo account on our platform: https://www.myinwebo.com/signup/3 
 * Connect to InWebo administration console to generate the certificate (administrator connection required) 
 * Save it to your desktop 
 * Note the ID of the service for which the certificate was created, and the passphrase used to generate the certificate
For more information about InWebo account & service management: http://developer.inwebo.com/en/node/11
<h3>Plugin configuration</h3>
<ul>
<li>Open the plugin administration page (it appears as “In-Webo Login” in the WordPress administration menu, under the “Settings” section)</li>
<li>Add the required information in the appropriate fields: certificate file name (with extension .crt), certificate passphrase and service ID</li>
<li>Allow automatic provisioning of In-Webo users or not (see section 6)</li>
</ul>
The configuration of the plugin is done.
<h3>Enabling InWebo authentication for users</h3>
InWebo authentication mode is set up at the user level in WordPress. It means you can determine which authentication mode to use for each user (InWebo or WordPress native). To activate InWebo authentication for a user: 
 * Display user properties in WordPress administration 
 * Tick box “User login is managed by In-Webo” at the bottom of the user page
Notes: 
 * Choosing In-Webo authentication mode means that this user will have to authenticate with InWebo. You will have to add him as user of the service in InWebo administration console before then he can connect to the site 
 * It is recommended to leave the authentication of WordPress user “admin” rely on WordPress authentication
<h3>Self-Provisiong of users</h3>
InWebo authentication plugin for WordPress allows the self provisioning of users in WordPress.
If the automatic provisioning of In-Webo users is allowed, it means that any user created in InWebo administration console can connect to the WordPress site, whether it exists or not in the WordPress users table. 
 * If the new InWebo user already exists, the user is simply authenticated by InWebo (check that the user login is managed by InWebo) 
 * If it does not exist, the user is first created on WordPress’s side, with user login managed by InWebo set to on, then authenticated
<h3>Testing the authentication</h3>
Before testing the access to your site with InWebo browser plugin, check that your login name for the service in InWebo administration console matches the login name of the user you would like to authenticate with in your CMS. 
If you are the first administrator of the service, by default your InWebo login name has been set to “admin“. Change it to match an appropriate CMS user login name. 
E.g.: if you want to authenticate with WordPress login “test” with InWebo, change “admin” to “test” in InWebo administration console.

InWebo Login

InWebo strong authentication plugin for WordPress

ahalawany

In a nutshell, ExtraShield is a FREE mobile application, which generates a unique 6 digit number called the “Security Code“. 
Every 50 seconds a new “Security Code” is generated on your mobile phone, this code will be used to log in to your wordpress account according to your “WordPress Login Mode” set in your profile page.
To use this cool feature, all you have to do is :
<ul>
<li>
[1] Install the FREE ExtraShield mobile application. 
“Only available for Java enabled phones (Nokia, Samsung .. etc.), no iphone or android versions yet.”
Using your mobile phone, go to http://wap.extrashield.com and download the ExtraShield application to your phone, run the application and follow the on-screen instructions.
Choose New, Then choose a 4 digits PIN code, which will be used to open the application on your mobile phone. Now, the application will communicate with the server and register a new ExtraShield Mobile ID for you, something like (XTSH27197262).
</li>
<li>
[2] Install This Plugin 🙂 .
</li>
<li>
[3] Let the plugin know your new assigned ExtraShield Mobile ID.
Remember the ExtraShield Mobile ID we got from step 1 ?! .. now go to your “Profile” page and add your new ExtraShield Mobile ID, choose your preferred “WordPress Login Mode” and Press “Update User“.
Voila! you are done .. Enjoy!
</li>
</ul>
Remember, The ExtraShield system is currently in beta, so feedback is highly encouraged .. For questions, feedback, ideas or support please contact : support@extrashield.com
<h3>Privacy</h3>
Since Version 0.7, the plugin will attempt to register itself with the ExtraShield Authentication Servers during initial activation, eliminating the need for manual registration.
NO identifiable information is ever sent during the automated registration process, just an md5 hash of the following md5($_SERVER[‘SERVER_ADDR’].md5(rand(10000000, 99999999)))
<h3>Usage</h3>
After installing the plugin and the ExtraShield mobile application on your mobile phone, the plugin gives you 3 “WordPress Login Modes” :
<ul>
<li>
Login using your Password AND Mobile Security Code. [Recommended]
In this mode, you need to enter your UserName, Password and the Mobile Security Code generated on your mobile phone to access your WordPress account.
This means, for anyone else to access your account, he/she needs to know your WordPress account UserName, Password and be able to access the ExtraShield Application installed on YOUR mobile phone to get a valid Mobile Security Code .. Pretty hard, right !
</li>
<li>
Login using your Password OR Mobile Security Code.
In this mode, you need to enter your UserName and either your Password or Mobile Security Code generated on your mobile phone to access your WordPress account.
This mode is useful if you occasionally need to access your WordPress account from insecure/public places. For example, at an internet cafe you may access your account using the Mobile Security Code instead of your password, thus eliminating the risk of your password being hijacked by Trojans or Viruses, and when you are back at home or a secure environment, you may use your normal password again .. It’s all about choices !
</li>
<li>
Login using Mobile Security Code only.
In this mode, you only need to enter your UserName and the Mobile Security Code generated on your mobile phone to access your WordPress account.
If you don’t want to remember a password, this mode is for you !
</li>
</ul>
Just choose your preferred “WordPress Login Mode” and Press “Update User” .. That’s it!

ExtraShield

Adds an ExtraShield of protection and security to your WordPress by using your mobile phone to generate a one-time password for login.

InWebo Login vs ExtraShield