• Home
• App Integrations
• MFA Integrations
• Two-Factor Authentication (2FA) for Squarespace

Squarespace Two-Factor Authentication (2FA/MFA)

---

Squarespace 2 Factor Authentication is an additional layer of security in which a user is prompted to provide two factors to gain access to the Squarespace account. With Squarespace 2FA being enabled, anyone trying access your Squarespace account from an unrecognized computer/device must provide additional authorization. Authentication starts with a user submitting his traditional username and password. Once the user successfully gets authenticated with the 1st step verification, configured 2FA (OTP verification, Push Notifications, Yubikey, TOTP, Google Authenticator etc) method prompts for 2nd-step verification. After successfully authenticating with both of the steps a user is granted with the access to the Squarespace account. This extra layer prevents the unauthorized person from accessing the resources even if cyber attackers get to know your credentials.

miniOrange provides 15+ authentication methods and solutions for Squarespace. It allows users and organizations to set up certain authentication and settings which includes password restrictions, restricting sign-in methods, as well as other security settings. miniorange also makes way for authentication apps that support Time-Based One-Time Password (TOTP) Google Authenticator, Microsoft Authenticator, Authy 2-Factor authentication app and miniorange Authenticator app.

Follow the Step-by-Step Guide given below for Squarespace two-factor authentication (2FA) :

1. Configure Squarespace in miniOrange

• Login to miniOrange Admin Console.
• Go to Apps Click on Add Application button.



• Under the Choose Application Type, click on JWT.



• Search for Squarespace and select it.



• In Add Apps tab enter the values and click on Save.




Custom Application Name	Choose appropriate name according to your choice.
Description	Add appropriate description according to your choice.
Redirect-URL	Endpoint of Squarespace, which will receive the JSON Web token and process it.
Group Name	Default
Policy Name	Add policy name according to your Preference.
Login Method	Password.

• Edit your recently created App by going to Apps >> Select option under Action dropdown >> Edit.






Signature Algorithm

Choose RSA-SHA256

• Click on Save
• Now, You can access Squarespace Account Using IDP credentials through the Single-sign-on URL

2. Adding Script on Squarespace's End

• To enable SSO on Squarespace's end, all you need to do is add a customized script.
• Click here to download the script needed or you can reach out to us at idpsupport@xecurify.com at any time if you need help with the integration.
• Before adding the script, please enable safe mode by adding /safe in the url of your site , this prevents the script from running on your admin end.
• Next go to Settings → Advanced → Code Injection and paste the downloaded script in the Header section as shown below:

3. Configure 2FA for Squarespace

3.1: Enable 2FA for Users of Squarespace app

• To enable 2FA for Users of Squarespace application. Go to Policies >> App login policy
• Search for the app you have configured and Click on Edit.



• Enable the Enable 2-Factor Authentication (MFA) option.



• Click on Save.

3.2: Configure 2FA for your Endusers

• To enable 2FA/MFA for endusers, go to 2-Factor Authentication >> 2FA Options For EndUsers.
• Select default Two-Factor authentication method for end users. Also, you can select particular 2FA methods, which you want to show on the end users dashboard.
• Once Done with the settings, click on Save to configure your 2FA settings.

3.3: Enduser 2FA Setup

• Login to End-User Dashboard using end user login URL.
• For Cloud Version: The login URL (branding url) which you have set.



• For On-Premise version: The login URL will be the same as of Admin Login URL.
• Select Setup 2FA from left panel. Then select any of the 2FA method available.
• For now, we have selected the SMS >> OTP OVER SMS as our 2FA method. You can explore the guide to setup other 2FA methods here.
• Enable the OTP over SMS if you have your phone number added under your profile section else click on Edit button.



• Enter you Phone Number along with the necessary country code and click on the SAVE button.

4. Test Squarespace 2FA

a. If 2FA for for End-user is configured

• Go to your Squarespace Domain. It will redirect you to miniOrange Single Sign-On Service console.



• Enter your login credentials, and click on login. It will prompt to verify yourself against the configured 2fa method.
  e.g. If you have configured OTP over SMS, after login into Squarespace it will prompt for OTP.



• Enter the OTP received in your phone, after successful 2fa verification, you will be redirected to the Squarespace dashboard.

b. If 2FA for end-user is not enabled

• You will be prompted to register for 2Fa for end-user. It's a one time process.
• Configure your basic details.



• Configure any authentication method of your choice.



• After successful registration, you will be logged in to your Squarespace account.


Not able to configure or test MFA?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• Looking for Squarespace SSO solution
• Squarespace admin console
• Why and how do you use multi-factor authentication?