Sign-in restrictions (CORE ONLY)

You can use sign-in restrictions to limit the authentication with password for web interface and Git over HTTP(S), two-factor authentication enforcing, as well as as configuring the home page URL and after sign-out path.

Password authentication enabled

You can restrict the password authentication for web interface and Git over HTTP(S):

• Web interface: When this feature is disabled, an external authentication provider must be used.
• Git over HTTP(S): When this feature is disabled, a Personal Access Token must be used to authenticate.

Two-factor authentication

When this feature enabled, all users will have to use the two-factor authentication.

Once the two-factor authentication is configured as mandatory, the users will be allowed to skip forced configuration of two-factor authentication for the configurable grace period in hours.

Sign-in information

All users that are not logged-in will be redirected to the page represented by the configured "Home page URL" if value is not empty.

All users will be redirect to the page represented by the configured "After sign out path" after sign out if value is not empty.

If a "Sign in text" in Markdown format is provided, then every user will be presented with this message after logging-in.

Settings

To access this feature:

1. Navigate to the Settings > General in the Admin area.
2. Expand the Sign-in restrictions section.