Login | Axero Documentation

Single Sign-On

Axero works with the single sign-on providers below. See Single Sign-On (SSO) for setup guides.

Private Intranet

When your intranet is private, anyone who is not signed in sees the login page, where they sign in with a username or email address, or with any single sign-on provider you have enabled (Single Sign-On (SSO)). Visitors also have the option to register for an account or reset their password.

Register

Remember Me

Forgot Password

Single Sign-On (SSO)

Public Intranet

When your intranet is public, anyone who is not signed in sees your homepage and all public spaces. Permissions control what a visitor can open. Check or uncheck Guest permissions in Control Panel > Content for top-level content and in Manage Space for space content.

To make your intranet public, go to Control Panel > System > General Settings > Site Settings, clear the Yes checkbox next to Allow access only to registered members, and click Save System Settings.

Two-Factor Authentication

Enable Two-Factor Authentication on your site to add an extra layer of security: people enter a passcode as well as their password.

How to Set Maximum Invalid Login Attempts

You can set the maximum number of invalid login attempts allowed before an account is locked.

Go to Control Panel > System > System Properties and search for MaxInvalidLoginAttempts.

How to Unlock an Account

To unlock an account, click Forgot Password. An administrator can also reset a user's password in Control Panel > People > Manage People.

Login Variations

If your site uses Single Sign-On (SSO) with auto-login, people are sent to your provider's sign-in page instead of the Axero login page.

When your intranet does not use a single sign-on provider, people sign in on the Axero login page with their username or email address and their password. Leave these three fields on the page, or nobody will be able to sign in:

• Email or username
• Password
• Sign-in button

Also, if your site has Two-Factor Authentication enabled, don't remove the "Enter your two-factor authentication passcode" section.

Related pages

• Edit Login Page (to set whether people sign in with an email address, a username, or either)
• Single Sign-On (SSO) (the setup guide for each provider above)
• Two-Factor Authentication (to add the passcode step)
• System Properties (where MaxInvalidLoginAttempts is set)
• Remember Me (how long a login lasts)
• Show Password Checkbox (add a Show password checkbox)
• Site Security Best Practices (security settings for sign-in)