Jump to content

Invision Community Blog


Managing successful online communities

Mark
 

New: Device Management

This entry is about our IPS Community Suite 4.2 release.

One of our more technically-oriented features for 4.2, we have added more detailed logs of user logins, and the devices and IP addresses used. This brings several new features:

 

Notification of a new device sign in

If enabled, users can receive an email notification when a new device is used to log into their account:

 

Screen Shot 2017-03-14 at 17.47.55.png

Email sent when a login from a new device is detected

When a user signs in for the first time, a special key is set to recognise the browser on subsequent logins. This mean the notification email does not trigger on a new IP address, which would be annoying when travelling or if using a network where the IP address changes regularly. Instead, the notification is only triggered if someone signs into your account from a new physical device or web browser.

 

UserCP Device Management

If enabled, a new page will show in the user's settings page showing all the devices which have been used to log into their within the last 90 days (which is recent enough that could still be logged in if "Remember Me" was checked).

Recently Used Devices.png

Recently Used Devices

Users can see the device, browser, physical location (obtained by a GeoIP lookup) and if applicable, how the login was processed (for example, if the sign in was with Facebook or Twitter, this will show). If they chose "Remember Me" when logging in, they can undo that (handy if you realise you accidentally left yourself signed in on a public computer).

If they see anything they don't recognise, a page to walk them through the necessary steps to re-secure their account is available.

Screen Shot 2017-03-14 at 17.00.06.png

Secure Account Information

 

New Two-Factor Authentication Setting

"Logging into the front-end" is one of the options of when to prompt for Two Factor Authentication. In 4.2, this has been separated into two distinct settings:

  • Logging into the front-end from a new device
  • Logging into the front-end from a known device

If you enable the former, but not the latter, and the user has previously logged in devices, the system will automatically show an explanation to users alongside the other available recovery option. This can be useful especially if you do not want to offer other recovery options.

 

AdminCP Device Management

In the AdminCP, administrators can see all the device and IPs a member has used. They can also disable automatic login for any device.

 

Screen Shot 2017-03-14 at 17.30.18.png

Edit member page shows most recently used device and IP address

 

Screen Shot 2017-03-14 at 17.31.20.png Screen Shot 2017-03-14 at 17.31.26.png

Viewing a device's details

The system can also detect if another user is using the same device and will show this in the list of devices.

Screen Shot 2017-03-14 at 17.32.11.png  Screen Shot 2017-03-14 at 17.32.15.png

Users sharing the same device

 


Comments



Recommended Comments

I didn't look very closely at the images earlier. Giving such large emphasis to the search input in the admin panel in 4.2 is a very good touch!

And all the settings and information areas for this looks nice :)

Edited by TSP

Share this comment


Link to comment
Share on other sites
4 minutes ago, TSP said:

I didn't look very closely at the images earlier. Giving such large emphasis to the search input in the admin panel in 4.2 is a very good touch!

And all the settings and information areas for this looks nice :)

Totally agree. A big fat search bar is familiar to a lot of people so this design choice is a plus for usability.

Share this comment


Link to comment
Share on other sites

Now did Mark break into Matt's account, or did Matt steal Mark's Mac? :lol:

Seriously though, this is a great advancement for the suite. I hope it does improve the issue(s) stated above with being force logged out on every ACP session.

Share this comment


Link to comment
Share on other sites
18 hours ago, AtariAge said:

The last bit about showing multiple users sharing the same device is very important to me as an admin.  Very nice addition!  If you can take this one step further and create a page that shows ALL devices with multiple users, that would be an extremely useful report.  This allows you to more easily catch people creating multiple accounts, especially handy to help catch trolls who are trying to evade a ban.  

Thank you!

Really like this as an additional mod feature.

Share this comment


Link to comment
Share on other sites

"The system can also detect if another user is using the same device and will show this in the list of devices"

If this happen, it would be very useful for us as administrators to receive any kind of notification regarding a purposed multiple account

 

Share this comment


Link to comment
Share on other sites
1 hour ago, Netherlord said:

Don't suppose this will also be useful for finding those pesky multiple accounts? please say yes!

Please read my first comment -- I hope Invision adds an Admin page that shows all devices being used with multiple accounts, as that'll be extremely useful.  Otherwise the only way you're going to see if someone is using multiple accounts on the same device is if you happen to look at their account in the admin panel for some reason.  

Share this comment


Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Add a comment...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

  Ask A Question ×