Question 1

How does Password Protection of Content (FAQs or Workflows) work?

Accepted Answer

Malcolm! let's you password protect individual items of content (e.g. a particular FAQ or Workflow) and/or your Hosted Hub.

The best option for you will depend on how exactly you use and implement Malcolm!

Password Protection on Hosted Hub

You can add a "start of session" password to your Hosted Hub via the Visibility tab in the Settings section in MyMalcolm.

In this area you can add one or more passwords. For example you could add one password that all your users share, or you could give each user an individual password. You can supply a label/description next to the password in MyMalcolm to remind yourself who that password was created for. From the same area you can suspend or delete previously created passwords, as well as see when passwords were last used.

When a user visits any page on your Hosted Hub they create a web session. The first time they do this they will be asked for their password.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/f2uGLquUY3/Screenshot%202019-04-23%2010.55.25.png (Screenshot 2019-04-23 10.55.25 (2).png)

Password Protection on Individual Content Items

You can also add configure password protection on individual items of content like an FAQ or a Workflow. You do this via the Visibility tab in the Configure section of the individual FAQ or Workflow (which you access via the library in the respective FAQ or Workflow section of MyMalcolm).

The default setting for items of content is that they inherit the settings from the Hub. So if no password is set at a Hub level no password is required to view the content. If a password is set at a Hub level then a password will be required at the start of the user session. If you want to ensure that a password is always required before a particular FAQ or Workflow is accessed you should set it at this content level. Bear in mind however that if you also have a Hub password set and a user starts their session with a direct link to individual content that is password protected they will need to enter two passwords: one to get them into the Hub session and a further password to view the content.

You can also set an individual item of content to never require a password, even if the Hub has a password set. This can be useful if, for example, you want to put all your content behind a Hub password but want to create a Workflow that lets people request access. In this scenario you would create a Workflow for the purpose of requesting access, set it to never require a password then link to it from the text you can configure on the Hub password request screen. When requests come in you can review them and if you approve you can manually set up the user's password.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/I3VJyQJ4IZ/Screenshot%202019-04-23%2010.57.05.png (Screenshot 2019-04-23 10.57.05.png)

Also worth noting

If a user makes three failed password attempts they will not be able to attempt a further password within that session for 30 minutes.

Auth0

We also support managing user passwords via Auth0- see more details here and via Memberstack - see more details here.

Question 2

How can I password-protect my hub with Memberstack?

Accepted Answer

Malcolm supports using Memberstack to password-protect your content.

This guide will help you set up Memberstack.

First go to MyMalcolm > Settings > Instance > Visibility and toggle the option to use a third party service for Hosted Hub password protection. This automatically enables the built-in password protection.

Activating third party Single Sign On (SSO)

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/M5riHygBgk/screenshot-my.malcolm.app-2022.10.03-05_58_09.png (Choose Memberstack from the dropdown)

Next, from the Memberstack Dashboard, go to Dev Tools > Add Integration.

Add a new custom SSO Integration

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/9pIEqPe6kK/Screenshot%202022-10-03%20at%2007.00.53.png (Add a new custom SSO Integration)

Copy the Redirect URI from MyMalcolm and paste it into Memberstack.

Redirect URI in MyMalcolm

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/IHbM8Ppu1v/screenshot-my.malcolm.app-2022.10.03-05_58_32.png (Cut and paste this into Memberstack)

Then, in Memberstack, press Add Integration.

Once created, in Memberstack click the Edit button next to the Integration and copy the Client ID and Secret Key.

Your Custom SSO Integration

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/I1TfM7CL3a/Screenshot%202022-10-03%20at%2007.01.12.png (Obtaining the Client ID and Secret Key from Memberstack)

Paste these values into the boxes in MyMalcolm.

Client Credentials in MyMalcolm

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/Oq33GMwLTG/screenshot-my.malcolm.app-2022.10.03-05_58_32%202.png (Add your credentials from Memberstack here)

Save the settings on both sides and you should see your Memberstack login page appear in your Hub.

Login to Hosted Hub

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/DkMgxR3Mti/Screenshot%202022-10-03%20at%2007.01.36.png (Hosted Hub login using Memberstack SSO)

Attributes from your Memberstack users can be pre-populated in Malcolm! Workflows. To enable this feature choose a suitable field on a Workflow, edit the field settings and enable "Allow a value to be set in the URL query". Enter one of the two attributes name or email to pre-populate those values directly into your Workflow.

Question 3

How do I reset my password?

Accepted Answer

If you need to reset your Malcolm! user account password please visit this link.

Question 4

Can I password protect my Hosted Hub?

Accepted Answer

Yes, you can password protect your Hosted Hub. You can also password protect individual FAQ's or Workflows.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/KFFCF1u5Kx/password-fb%402x.png (Password protect your content on Malcolm!)

Read more about password protection of content on Malcolm! here.

Question 5

How can I password-protect my hub with Auth0?

Accepted Answer

Malcolm supports using Auth0 to password-protect your content.

This guide will help you set up Auth0.

First go to MyMalcolm > Settings > Instance > Visibility and enable Hosted Hub password protection. This automatically enables the built-in password protection.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/ea8meZWJKM/Screenshot%202021-11-25%20at%2016.37.03.png (Screenshot 2021-11-25 at 16.37.03.png)

Next, inside your Auth0 tennant, create a new Auth0 Application. Give it a name and choose Regular Web Applications from the four options.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/VDfX0QpiZh/Screenshot%202021-11-25%20at%2016.31.49.png (Screenshot 2021-11-25 at 16.31.49.png)

Click on the Settings tab and scroll down to the Basic Information section.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/JReEIPSyji/Screenshot%202021-11-25%20at%2016.46.53.png (Screenshot 2021-11-25 at 16.46.53.png)

In MyMalcolm click through to Manage password protection and toward the bottom enable Auth0 for password protection. Copy/paste the Domain, Client ID and Client Secret from Auth0 into MyMalcolm.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/mwX1ffzhIZ/Screenshot%202021-11-25%20at%2016.40.03.png (Screenshot 2021-11-25 at 16.40.03.png)

Next copy/paste the Application Login URI, Allowed Callback URL and Allowed Logout URL from Malcolm! into your Auth0 Application URIs settings.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/ST4LVVMZ3x/Screenshot%202021-11-25%20at%2016.45.36.png (Screenshot 2021-11-25 at 16.45.36.png)

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/kpvEhZpVtp/Screenshot%202021-11-25%20at%2016.40.39.png (Screenshot 2021-11-25 at 16.40.39.png)

Save the settings on both sides and you should see your Auth0 login page in your Hub.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/oijJOqmb9t/Screenshot%202021-11-25%20at%2016.42.11.png (Screenshot 2021-11-25 at 16.42.11.png)

But that's not all!

Attributes from your Auth0 users can be pre-populated in Malcolm! Workflows. To enable this feature choose a suitable field on a Workflow, edit the field settings and enable Allow a value to be set in the URL query. Enter one of the four attribute names email, name, nickname or picture to pre-populate those values directly into your Workflow.

https://malcolm-en-gb.s3.eu-west-1.amazonaws.com/instances/HwJyEPPI3q/resources/5zfBKHJgrE/Screenshot%202021-11-25%20at%2017.23.01.png (Screenshot 2021-11-25 at 17.23.01.png)

You can read more about passing values in the URL query here.

How does Password Protection of Content (FAQs or Workflows) work?

How can I password-protect my hub with Memberstack?

How do I reset my password?

Can I password protect my Hosted Hub?

How can I password-protect my hub with Auth0?

Upgrade your content

Hey there!