NotAuthState - property of the PmUser object
Description:
User Multifactor Authentication Status.
Syntax:
Long NotAuthState
Values:
0 (default) - means that the user is fully authenticated. In other words, either multi-factor authentication is not enabled, or it is enabled but the user has successfully completed all steps of the multi-factor authentication process.
1 - means that the user is not yet fully authenticated and is waiting for multi-factor authentication to complete. Although this user is logged into the system, they are temporarily assigned only to a special security group
$NOTAUTH. This group grants them access only to a limited set of functions required to complete multi-factor authentication (e.g. to enter a code from the web application). In the
Preconfiguration "Two-factor user authentication", the user is redirected to a special login screen (
NotAuthPanel screen) to enter the code to complete multi-factor authentication. By entering the correct code from the
NotAuthPanel screen, this user becomes fully authenticated (
NotAuthState is set to 0) and gains access to all functions corresponding to their normal permissions.
Note:
Property access
for read and write.
The
NotAuthState property is not set automatically by the system.
If multi-factor authentication is required, then in the script it is set during user login in the
onUserLogonBegin event; to the
1 value.
If the user later enters a code to complete the multi-factor authentication, then it must be set to 0, which means the user is fully authenticated.
The
NotAuthState property is closely linked to the
NotAuthParams property, which contains auxiliary information (the e.g. code) required to complete the user's multi-factor authentication.
