How To: Enable Two-Factor Authentication for SiteWorx
=====================================================

From the Authentication page in SiteWorx, SiteWorx Users are able to set up Two-Factor Authentication 
(2FA) for their user accounts. 

.. contents::

To Enable 2FA
-------------

#. Log into SiteWorx from the browser (https://ip.ad.dr.ess:2443/siteworx)
#. In SiteWorx, navigate to **Administration > Authentication**

   .. image:: /images/sw-f2a.png
      :alt: siteworx 2fa page

#. Click **Generate**. This opens the Generate Key form

    .. image:: /images/sw-2fa-generate.png
      :alt: 2fa enable form 

#. Using the authenticator app of choice, scan the **QR Code**
#. Update the Authentication Code field with the corresponding **code** generated by the 
   authenticator app
#. Click **Save**

To Disable 2FA
--------------

To Disable Using the GUI 
^^^^^^^^^^^^^^^^^^^^^^^^
#. Log into SiteWorx from the browser (https://ip.ad.dr.ess:2443/siteworx)
#. In SiteWorx, navigate to **Administration > Authentication**

   .. image:: /images/sw-2fa.png
      :alt: 2fa page 

#. Click **Delete**

To Disable Using the CLI
^^^^^^^^^^^^^^^^^^^^^^^^

.. note::

   For this task to be completed by the SiteWorx user, the Server Administrator must 
   :doc:`enable SSH shell access for the account </nodeworx/server_management/ssh/manage-ssh-shell-users>`.

   If SSH shell access has not been enabled for the SiteWorx acccount, this task can only be completed by
   the Server Administrator.

#. Log in to the server at the CLI, either via SSH or from the terminal
#. At the CLI, run the following command, replacing {domain.com} with the corresponding information:

   .. code-block::
   
      siteworx -u --login_domain {domain.com} -n -c Twofactorauth -a delete