github.com/IBM-Cloud/terraform@v0.6.4-0.20170726051544-8872b87621df/website/source/docs/enterprise/user-accounts/authentication.html.md (about)

     1  ---
     2  layout: "enterprise"
     3  page_title: "Authentication - Accounts - Terraform Enterprise"
     4  sidebar_current: "docs-enterprise-accounts-authentication"
     5  description: |-
     6    Terraform Enterprise requires a username and password to sign up and login. However, there are several ways to authenticate with your account.
     7  ---
     8  
     9  # Authentication
    10  
    11  Terraform Enterprise requires a username and password to sign up and login.
    12  However, there are several ways to authenticate with your account.
    13  
    14  ### Authentication Tokens
    15  
    16  Authentication tokens are keys used to access your account via tools or over the
    17  various APIs used in Terraform Enterprise.
    18  
    19  You can create new tokens in the token section of your account settings. It's
    20  important to keep tokens secure, as they are essentially a password and can be
    21  used to access your account or resources. Additionally, token authentication
    22  bypasses two factor authentication.
    23  
    24  ### Authenticating Tools
    25  
    26  All HashiCorp tools look for the `ATLAS_TOKEN` environment variable:
    27  
    28  ```shell
    29  $ export ATLAS_TOKEN=TOKEN
    30  ```
    31  
    32  This will automatically authenticate all requests against this token. This is
    33  the recommended way to authenticate with our various tools. Care should be given
    34  to how this token is stored, as it is as good as a password.
    35  
    36  ### Two Factor Authentication
    37  
    38  You can optionally enable Two Factor authentication, requiring an SMS or TOTP
    39  one-time code every time you log in, after entering your username and password.
    40  
    41  You can enable Two Factor authentication in the security section of your account
    42  settings.
    43  
    44  Be sure to save the generated recovery codes. Each backup code can be used once
    45  to sign in if you do not have access to your two-factor authentication device.
    46  
    47  ### Sudo Mode
    48  
    49  When accessing certain admin-level pages (adjusting your user profile, for
    50  example), you may notice that you're prompted for your password, even though
    51  you're already logged in. This is by design, and aims to help guard protect you
    52  if your screen is unlocked and unattended.
    53  
    54  ### Session Management
    55  
    56  You can see a list of your active sessions on your security settings page. From
    57  here, you can revoke sessions, in case you have lost access to a machine from
    58  which you were accessing.