Admins have to follow the usual steps if they want to protect Moddle with Latch:
1. Create a developer account if they haven´t it.
2. Create an application with the features they want (one-time password has not been implemented yet for Moodle).
3. Download the plugin.
4. Install and configure the plugin in their Moodle environment.
Steps 1, 2 and 3 are documented on the website of Eleven Paths and step 4 is going to explained in this post.
Moodle plugin is a zip file, copy its contents to the root directory of Moodle.
|Moodle root directory|
After copying the plugin, Moodle administrator has to access his own account with username and password, and complete the installation.
To set up the plugin, the administrator should go to the “Manage authentication” section, under the “Site administration – Plugins – Authentication” menu and enable the Latch plugin.
|Enabling the plugin|
After enabling the plugin, the administrator has to enter the “Application ID” and the “Secret” to the section corresponding to “Latch” under the “Site administration – Plugins – Authentication” menu.
|Entering the app ID and the Secret|
Latch is now ready to be used and users are ready to pair their acounts. Users with Moodle accounts have to set their own accounts going to “My Profile settings – Edit profile”, access the “Latch” section. Type the token generated on the phone into the text box displayed on the web.
|Introduce the token generated by Latch app|
A notification will be received on the phone, announcing that the account is already paired.
|Notification after successful pairing|
Now the user may lock and unlock access to his Moodle account and a notification on his phone will be received, warning about somebody trying to access the account
|Notification of an unauthorized access attemp|
When Latch is installed in Moodle, Moodle database is set to store the values needed by Latch. Specifically the mdl_config_plugins table stores the Application ID and App Secret.
|mdl_config_plugin table with the Application ID an the Secret|
The mdl_user_info_data table indicates which user account has been paired with Latch.
|mdl_user_info_data table with the users that have already paired their accounts|