Configure the user icon menu

The user icon menu

By default, users can configure their user accounts from the username menu or user icon menu.

To access the user icon menu, click on your user initials or avatar in the lower left corner of the screen.

Disable edit account from the user icon menu

To disable the option to edit user details from the user icon menu for all users:

Go to Configuration → Security
Deselect the option to Allow user to change their password.

Display two factor authentication options

After the System Administrator configures 2fa, you can manage the use of 2fa on the platform.

For full details of how to configure 2fa, see Configure two factor authentication.

To enable 2fa for the platform:

Go to Configuration → Security
Edit the options and select Enable two factor authentication

To require 2fa for a tenant:

Go to Users → edit Enterprise → General
Select the checkbox to Require two-factor authentication for all users in the enterprise

When two factor authentication is required, the user must enable it from the username menu.

If two-factor authentication is not required, the user may optionally enable it for their own account from the username menu.

To disable the display of the two factor authentication item in the username menu, the administrator can set the client.2fa.activated property to false in the UI configuration. See Configure Abiquo UI.

See Enable two factor authentication

Allow a tenant admin to edit public cloud credentials for their enterprise

To allow a tenant administrator to edit credentials for their enterprise in public cloud, edit the user role and assign the following privileges:

Privilege: Manage provider credentials

See Add credentials for public cloud

If the tenant administrator has the Manage enterprises privilege, see Add public cloud credentials for a tenant

Manage applications

To allow a tenant administrator to manage OAuth applications, assign the following privileges:

Privilege: Manage OAuth applications

See Add an application for OAuth

Configure user logout

By default, when using standard platform authentication, users can log out of the UI. To prevent user logout:

Go to Configuration → General
Deselect the option to Allow user to log out

By default, after logout the UI will redirect to the login screen. To configure a redirect after logout:

Go to Configuration → General
In the Redirect to this URL after logout field, enter a URL

You can also set a redirect URL in the UI configuration, with the client.backto.url property. See Configure Abiquo UI

And you can configure login error screens. See Configure UI login errors.