Wconnect-authentication.app Reviews

Using the WConnect Authentication App

If this is your first time signing in, you will need to set up your password and multifactor authentication. Enter your Wayne State AccessID and password to continue.

Bridgetools workshops serve three goals for wConnect - undergraduate wConnect designers and leaders learn dynamic web development; high school girls develop web applications; and community members create and edit community content.

Multifactor Authentication

Multifactor authentication, or MFA, requires users to verify their identity using more than one factor. This means that once a user enters their username and password, they are then prompted for an extra verification step, usually via something they know (like a unique code sent by email, SMS or mobile app) or something they have (like a security token or hardware device).

For example, wConnect students and staff use two-factor authentication when logging in to their Helix Core accounts, including when submitting assignments for feedback. They also have to log in with MFA when they are working offsite from the office or remotely on their phones.

MFA is a great way to prevent unauthorized access to your files and proprietary business information, especially for small businesses that are more likely to be attacked by cybercriminals. Almost every online service you can think of supports adding a second layer of security, so make sure you go into your account settings and turn it on!

Password Reset

Password reset expedites problem resolution for users who forgot their password and reduces the number of help desk calls. This type of self-service password reset (SSPR) system works through an extension to the workstation login prompt, a browser web page or some other method that requires user verification before allowing access to the account and the ability to change the password.

It is important that SSPR systems require additional authentication, or at least that the security requirements for the reset password be higher than those for the original password. Otherwise, the password reset process could expose the user to phishing, social engineering or other types of infiltration attacks.

The best way to mitigate this threat is to use multi-factor authentication (MFA) when a user answers the questions that are used to verify their identity. This is typically done by using a hardware authentication token, responding to a notification e-mail or using biometrics such as a voice print.

Password Recovery

If you've forgotten your password, you can reset it by going to the self-service password portal. You will need to know your alternative email address or phone number, as well as a password hint, in order to reset your password.

Password recovery solutions make it easy to access software and hardware even if you've forgotten the password. Some offer advanced heuristics to improve chances of reversing password guesses or using parts of remembered passwords. These solutions can also unlock password managers and recent Windows local accounts, as well as Microsoft Live ID accounts.

John the Ripper is a reputable password recovery tool that works on Unix, macOS and Windows. It's available in source code for free, but it isn't well suited to novice users. A Pro version is available for a fee, and includes wordlists for fast and accurate results. It can also unlock PST files and remove PDF restrictions with GPU acceleration. It can even recover bcrypt hashes.

Access Control

Access control focuses on restricting access to data, tools and physical locations. Its basic definition is “rule-based policies that determine who gets to access what.” Authentication and authorization are the first steps in any access control process.

A person needs to present a credential in order for the access system to verify them and decide whether or not they can enter. A credential can be something that a user knows, such as their password or PIN; something they have, like a badge, token or smart card; or something that they are, such as their fingerprint or iris.

Most large access control systems use Role-Based Access Control (RBAC) to reduce the number of permissions that an administrator needs to grant to a user. This is important for service providers that are required to adhere to strict confidentiality standards, such as HIPAA or SOC 2. RBAC allows administrators to create groups of roles with specific privileges that a user can then be placed into without having to assign permissions on an individual basis.