To enhance the security and user experience of our users, Xentral will implement the services of an identity provider. This will be signified by a new login method and allows us to offer the following features:
-
Breached password notification
If any of your passwords are detected in a data breach, you will be alerted and your account blocked until you change your password.
-
Social login
Log in with an account of a social platform you already use, like Google.
Note
We are also working on further features like a more secure login via Multifactor authentication and a Single sign-on for all your Xentral services.
While our identity provider mostly affects processes in the background, some workflows were adjusted to feature the new security features:
-
Log in with email address
Instead of logging in with your username, you can log in with your email address. You can find out more about the new login method here: Logging in to Xentral.
-
Activate service account
A service account can help our support team get access to your instance, so they can identify and help you with your issues quicker. A support agent can be directly invited via email and equipped with the necessary rights.
You can learn more about this process here: Enabling a service account for the customer support team.
-
Invite users to your instance
When an admin creates a new user, this user will get an invite link by email. The user can then set up their own password. You can learn more about this process here: Creating users and managing their rights.
Tip
Enable new Login Method:
The new login method will automatically be rolled out to all instances of Xentral in batches throughout the first quarter of 2024.
Multi-factor authentication (MFA) uses two or more independent authentication factors, such as knowledge (secret code), possession (security key), and inherence (biometric traits), to verify a user's identity. This enhances security by requiring multiple factors for access, thereby reducing the risk of unauthorized entry.
All users with a verified email address receive an email when the new login method is enabled. Please check your email accounts for an email from Xentral.
If you still can't remember your email address, ask the admin of your instance to share it with you. Alternatively your admin can change your email address in the User module by editing your Xentral user account.
If you are still logged in, you can find your linked email address in Xentral NextGen under Administration menu > Account settings > Email and password.
In classic design, you can find your email under Administration menu > Edit profile.
I did not have an email address for my Xentral account when the new login method was enabled. How can I get access to my instance?
In this case, you have to reach out to the admin of your Xentral instance. They can then do the following:
-
They can add an email address to your Xentral account in the User module. Afterwards you can log in with your email address and password or ask for a password reset.
-
They can invite you to the instance as a new user.
No, the update process works the same way as before. You can log in to the updater with your regular Xentral credentials. If you are already logged in to your instance, you will automatically be logged in to the updater.