The login dialog is available under the /system/login URL path, or alternatively, under the /workplace path.
Enter your username and password in order to log into the workplace.
When clicking on the Show options button, one will get additional options. For example, this takes you to the password reset dialog, or a selection appears to log in to a specific organisational unit.
The workplace login can be additionally secured by two-factor authentication. In order to activate two-factor authentication, a configuration setting is needed in OpenCms, and the workplace users have to install an authenticator app of their choice on their personal devices that supports the so-called TOTP procedure. TOTP stands for time-based one-time password. Suitable apps are the Google Authenticator or the Microsoft Authenticator app, for example.
If two-factor authentication is configured as explained in the configuration guide, a QR code appears for each workplace user when they log in for the first time. The QR code must be scanned with the user's authenticator app. After successful scanning, the user device is linked to this very OpenCms installation.
For all subsequent logins, only one input field appears in which the workplace user must enter a verification code. The workplace user receives this verification code from his authenticator app.
For the purpose of resetting a user's two-factor login, there is a respectice checkbox available in the authentication tab of the edit user dialog in the OpenCms accounts app. A reset can only be triggered by an OpenCms user administrator.
You can plug in your own login mechanismn via extensions. For example, the OpenCms OCEE LDAP connector is such an extension that allows to add single sign on.