Configuring Email Address Login Verification

Scenarios

For logins to bastion host instance, you can also enable email verification for users. Then, after a user enters a password, an email verification code is required for a login. In addition, email verification supports logins over SSH clients.

Prerequisites

• You have configured an email address and tested it successfully.
• You have added users. For details, see Adding a User.

Notes and Constraints

• This method is not supported for first-time logins. You need to configure this login method after the first login.
• Only CBH systems of V3.3.62.0 and later versions support email address authentication.

Step 1: Bind an Email Address to a User

The email address bound to a user must be valid and can receive emails.

Method 1: Binding an Email Address to You

1. Log in to the bastion host as a user.
2. Click the username in the upper right corner and click Profile.
3. In the Basic Info area, click Edit.
4. Enter a valid email address in the Email text box.
5. Click OK.

Method 2: Binding an Email Address to Others as the Administrator

1. Log in to the bastion host as an administrator.
2. In the navigation pane on the left, choose User > User to go to the user list page.
3. Select a user and click its LoginName.
4. On the displayed page, click Edit in the Basic Info area.
5. Enter a valid email address in the Email text box.
6. Click OK.

Step 2: Configure Email-Based Multi-Factor Authentication for a User

Method 1: Configuring Email-Based Multifactor Verification for an Individual User

1. Log in to the bastion host system as the administrator.
2. In the navigation pane on the left, choose User > User to go to the user list page.
3. Select a user and click its LoginName.
4. In the User Setting area, click Edit.
5. In the displayed box, select Email Verification for Multifactor Verification.
   

   If you have configured other login verification methods and still want to use them, select them all together in this step.

6. Click OK.

   After the configuration is complete, you can view the multi-factor verification mode of the user in the User Settings area.

Method 2: Configuring Email-Based Multifactor Verification for Multiple Users At Once

1. Log in to the bastion host system as the administrator.
2. In the navigation pane on the left, choose User > User to go to the user list page.
3. In the user list, select one or more target users and choose More > Edit multifactor below the list.
4. In the displayed box, select Email Verification for Multifactor Verification.
   

   • If you have configured other login verification methods and still want to use them, select them all together in this step.
   • If you want to enable email verification for all accounts in the department that the target account belongs to or all accounts in its subordinate departments, select Modify All.

5. Click OK.

   After the configuration is complete, choose User > User, click the login name of the target user, and view the multi-factor verification method of the user in the User Setting area.

Follow-up Operations

After the email address is configured for a user, the user needs to enter the password and email verification code to log in to the bastion host. For details, see Using an Email Address for Login Authentication.