[%# This Source Code Form is subject to the terms of the Mozilla Public # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. # # This Source Code Form is "Incompatible With Secondary Licenses", as # defined by the Mozilla Public License, v. 2.0. #%] [% SET MFA_HOWTO = "https://wiki.mozilla.org/BMO/UserGuide/Two-Factor_Authentication" %] [% tab_footer = BLOCK %]
[% END %] [% IF NOT Bugzilla.feature('mfa') %]

Two-factor Authentication is not available.

[% RETURN %] [% END %] [% IF user.cryptpassword == '*' %] [% IF Bugzilla.request_cache.mfa_warning %]

Your account requires Two-Factor authentication to be configured before you can use [% terms.Bugzilla %]

[% END %]

Before you can enable two-factor authentication you must set a password on your account. To do this on your account please click on "Reset Password"; this will email you instructions to start the password reset process.

As part of this transition you will no longer be able to use GitHub to log in to [% terms.Bugzilla %].

[% RETURN %] [% END %]
[% IF mfa_recovery_token %]

Here are your recovery codes.

[% INCLUDE recovery_blurb %] [% ELSIF user.mfa %]

Two-factor authentication is currently enabled using [% SWITCH user.mfa %] [% CASE "TOTP" %]TOTP [% CASE "Duo" %]Duo Security [% END %].

[% INCLUDE "mfa/protected.html.tmpl" %]
[% INCLUDE "mfa/protected.html.tmpl" %]

[% IF user.settings.api_key_only.value == 'on' %] Enabling two-factor authentication has also required systems that interface with [% terms.Bugzilla %]'s API to use API keys for authentication.

While not recommended, this limitation can be lifted by changing the Require API key authentication for API requests preference. [% ELSE %] Systems that interface with [% terms.Bugzilla %]'s API are not required to use API keys.
Change the Require API key authentication for API requests preference to enforce API key usage. [% END %]

[% IF user.mfa %]

You will need to disable your two-factor authentication in order to change to a different method. There will be a small amount of time when your account will not be as secure, so you may use the sessions page to log out all other sessions other than the current one after setting up the new method.

[% END %] [% ELSE %] [% IF Bugzilla.request_cache.mfa_warning %]

You must enable two-factor authentication [% UNLESS Bugzilla.request_cache.mfa_grace_period_expired %] before [% Bugzilla.user.mfa_required_date FILTER time %]. After that date, you will be restricted to this page until 2FA is configured. [% ELSE %] before continuing to use [% terms.Bugzilla %]. [% END %]

Need help setting up 2FA? You may want to read these comprehensive instructions.

[% ELSE %]

Two-factor authentication is currently disabled.

[% END %]

Select the two-factor system you want to use:


Requires a smartphone and a TOTP app (such as Google Authenticator or Red Hat FreeOTP),
[% IF Param("duo_host") %]
Requires a Duo Security account (recommended for Mozilla employees).
[% END %]
[%# enable - TOTP %] [% IF Param("duo_host") %] [%# enable - duo %] [% END %] [% END %]
[% BLOCK recovery_blurb %] [% END %]