feat: Ensure MFA email and phone are validated before enabling (#3143 )

Added validation checks to ensure that a user's email and phone number are provided before enabling MFA email and phone respectively. This fixes the issue where MFA could be enabled without these values, causing inconsistencies.
feat: complete i18n translation (#3141 )
2025-08-10 15:27:48 +08:00 · 2024-08-26 08:40:22 +08:00 · 2024-08-24 23:27:59 +08:00 · 2024-08-24 00:12:52 +08:00 · 2024-08-23 23:36:55 +08:00 · 2024-08-23 22:19:17 +08:00
66 changed files with 552 additions and 101 deletions
--- a/conf/app.conf
+++ b/conf/app.conf
@@ -21,6 +21,7 @@ originFrontend =
 staticBaseUrl = "https://cdn.casbin.org"
 isDemoMode = false
 batchSize = 100
+enableErrorMask = false
 enableGzip = true
 ldapServerPort = 389
 radiusServerPort = 1812
--- a/controllers/link.go
+++ b/controllers/link.go
@@ -60,7 +60,6 @@ func (c *ApiController) Unlink() {
 			c.ResponseError(err.Error())
 			return
 		}
-
 		if application == nil {
 			c.ResponseError(c.T("link:You can't unlink yourself, you are not a member of any application"))
 			return
--- a/controllers/user.go
+++ b/controllers/user.go
@@ -289,6 +289,16 @@ func (c *ApiController) UpdateUser() {
 		}
 	}

+	if user.MfaEmailEnabled && user.Email == "" {
+		c.ResponseError(c.T("user:MFA email is enabled but email is empty"))
+		return
+	}
+
+	if user.MfaPhoneEnabled && user.Phone == "" {
+		c.ResponseError(c.T("user:MFA phone is enabled but phone number is empty"))
+		return
+	}
+
 	if msg := object.CheckUpdateUser(oldUser, &user, c.GetAcceptLanguage()); msg != "" {
 		c.ResponseError(msg)
 		return
--- a/controllers/util.go
+++ b/controllers/util.go
@@ -45,6 +45,13 @@ func (c *ApiController) ResponseOk(data ...interface{}) {

 // ResponseError ...
 func (c *ApiController) ResponseError(error string, data ...interface{}) {
+	enableErrorMask := conf.GetConfigBool("enableErrorMask")
+	if enableErrorMask {
+		if strings.HasPrefix(error, "The user: ") && strings.HasSuffix(error, " doesn't exist") || strings.HasPrefix(error, "用户: ") && strings.HasSuffix(error, "不存在") {
+			error = c.T("check:password or code is incorrect")
+		}
+	}
+
 	resp := &Response{Status: "error", Msg: error}
 	c.ResponseJsonData(resp, data...)
 }
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ require (
 	github.com/casdoor/go-sms-sender v0.24.0
 	github.com/casdoor/gomail/v2 v2.0.1
 	github.com/casdoor/notify v0.45.0
-	github.com/casdoor/oss v1.6.0
+	github.com/casdoor/oss v1.7.0
 	github.com/casdoor/xorm-adapter/v3 v3.1.0
 	github.com/casvisor/casvisor-go-sdk v1.4.0
 	github.com/dchest/captcha v0.0.0-20200903113550-03f5f0333e1f
--- a/go.sum
+++ b/go.sum
@@ -1091,8 +1091,8 @@ github.com/casdoor/gomail/v2 v2.0.1 h1:J+FG6x80s9e5lBHUn8Sv0Y56mud34KiWih5YdmudR
 github.com/casdoor/gomail/v2 v2.0.1/go.mod h1:VnGPslEAtpix5FjHisR/WKB1qvZDBaujbikxDe9d+2Q=
 github.com/casdoor/notify v0.45.0 h1:OlaFvcQFjGOgA4mRx07M8AH1gvb5xNo21mcqrVGlLgk=
 github.com/casdoor/notify v0.45.0/go.mod h1:wNHQu0tiDROMBIvz0j3Om3Lhd5yZ+AIfnFb8MYb8OLQ=
-github.com/casdoor/oss v1.6.0 h1:IOWrGLJ+VO82qS796eaRnzFPPA1Sn3cotYTi7O/VIlQ=
-github.com/casdoor/oss v1.6.0/go.mod h1:rJAWA0hLhtu94t6IRpotLUkXO1NWMASirywQYaGizJE=
+github.com/casdoor/oss v1.7.0 h1:VCOuD+CcD0MAA99p6JTyUak14bVR6UsaeyuTaVg0Mrs=
+github.com/casdoor/oss v1.7.0/go.mod h1:rJAWA0hLhtu94t6IRpotLUkXO1NWMASirywQYaGizJE=
 github.com/casdoor/xorm-adapter/v3 v3.1.0 h1:NodWayRtSLVSeCvL9H3Hc61k0G17KhV9IymTCNfh3kk=
 github.com/casdoor/xorm-adapter/v3 v3.1.0/go.mod h1:4WTcUw+bTgBylGHeGHzTtBvuTXRS23dtwzFLl9tsgFM=
 github.com/casvisor/casvisor-go-sdk v1.4.0 h1:hbZEGGJ1cwdHFAxeXrMoNw6yha6Oyg2F0qQhBNCN/dg=
--- a/object/check_util.go
+++ b/object/check_util.go
@@ -52,6 +52,9 @@ func GetFailedSigninConfigByUser(user *User) (int, int, error) {
 	if err != nil {
 		return 0, 0, err
 	}
+	if application == nil {
+		return 0, 0, fmt.Errorf("the application for user %s is not found", user.GetId())
+	}

 	failedSigninLimit := application.FailedSigninLimit
 	if failedSigninLimit == 0 {
--- a/object/ldap.go
+++ b/object/ldap.go
@@ -32,6 +32,7 @@ type Ldap struct {
 	BaseDn       string   `xorm:"varchar(100)" json:"baseDn"`
 	Filter       string   `xorm:"varchar(200)" json:"filter"`
 	FilterFields []string `xorm:"varchar(100)" json:"filterFields"`
+	DefaultGroup string   `xorm:"varchar(100)" json:"defaultGroup"`

 	AutoSync int    `json:"autoSync"`
 	LastSync string `xorm:"varchar(100)" json:"lastSync"`
@@ -148,7 +149,7 @@ func UpdateLdap(ldap *Ldap) (bool, error) {
 	}

 	affected, err := ormer.Engine.ID(ldap.Id).Cols("owner", "server_name", "host",
-		"port", "enable_ssl", "username", "password", "base_dn", "filter", "filter_fields", "auto_sync").Update(ldap)
+		"port", "enable_ssl", "username", "password", "base_dn", "filter", "filter_fields", "auto_sync", "default_group").Update(ldap)
 	if err != nil {
 		return false, nil
 	}
--- a/object/ldap_conn.go
+++ b/object/ldap_conn.go
@@ -339,6 +339,10 @@ func SyncLdapUsers(owner string, syncUsers []LdapUser, ldapId string) (existUser
 				Ldap:              syncUser.Uuid,
 			}

+			if ldap.DefaultGroup != "" {
+				newUser.Groups = []string{ldap.DefaultGroup}
+			}
+
 			affected, err := AddUser(newUser)
 			if err != nil {
 				return nil, nil, err
--- a/object/storage.go
+++ b/object/storage.go
@@ -30,6 +30,13 @@ import (

 var isCloudIntranet bool

+const (
+	ProviderTypeGoogleCloudStorage = "Google Cloud Storage"
+	ProviderTypeTencentCloudCOS    = "Tencent Cloud COS"
+	ProviderTypeAzureBlob          = "Azure Blob"
+	ProviderTypeLocalFileSystem    = "Local File System"
+)
+
 func init() {
 	isCloudIntranet = conf.GetConfigBool("isCloudIntranet")
 }
@@ -80,14 +87,14 @@ func GetUploadFileUrl(provider *Provider, fullFilePath string, hasTimestamp bool
 	objectKey := util.UrlJoin(util.GetUrlPath(provider.Domain), escapedPath)

 	host := ""
-	if provider.Type != "Local File System" {
+	if provider.Type != ProviderTypeLocalFileSystem {
 		// provider.Domain = "https://cdn.casbin.com/casdoor/"
 		host = util.GetUrlHost(provider.Domain)
 	} else {
 		// provider.Domain = "http://localhost:8000" or "https://door.casdoor.com"
 		host = util.UrlJoin(provider.Domain, "/files")
 	}
-	if provider.Type == "Azure Blob" {
+	if provider.Type == ProviderTypeAzureBlob || provider.Type == ProviderTypeGoogleCloudStorage {
 		host = util.UrlJoin(host, provider.Bucket)
 	}

@@ -100,7 +107,7 @@ func GetUploadFileUrl(provider *Provider, fullFilePath string, hasTimestamp bool
 		fileUrl = fmt.Sprintf("%s?t=%s", fileUrl, util.GetCurrentUnixTime())
 	}

-	if provider.Type == "Tencent Cloud COS" {
+	if provider.Type == ProviderTypeTencentCloudCOS {
 		objectKey = escapePath(objectKey)
 	}

@@ -135,11 +142,7 @@ func uploadFile(provider *Provider, fullFilePath string, fileBuffer *bytes.Buffe
 	}

 	fileUrl, objectKey := GetUploadFileUrl(provider, fullFilePath, true)
-
-	objectKeyRefined := objectKey
-	if provider.Type == "Google Cloud Storage" {
-		objectKeyRefined = strings.TrimPrefix(objectKeyRefined, "/")
-	}
+	objectKeyRefined := refineObjectKey(provider, objectKey)

 	_, err = storageProvider.Put(objectKeyRefined, fileBuffer)
 	if err != nil {
@@ -184,5 +187,13 @@ func DeleteFile(provider *Provider, objectKey string, lang string) error {
 		return err
 	}

-	return storageProvider.Delete(objectKey)
+	objectKeyRefined := refineObjectKey(provider, objectKey)
+	return storageProvider.Delete(objectKeyRefined)
+}
+
+func refineObjectKey(provider *Provider, objectKey string) string {
+	if provider.Type == ProviderTypeGoogleCloudStorage {
+		return strings.TrimPrefix(objectKey, "/")
+	}
+	return objectKey
 }
--- a/object/token_cas.go
+++ b/object/token_cas.go
@@ -277,7 +277,6 @@ func GetValidationBySaml(samlRequest string, host string) (string, string, error
 	if err != nil {
 		return "", "", err
 	}
-
 	if application == nil {
 		return "", "", fmt.Errorf("the application for user %s is not found", userId)
 	}
--- a/object/token_jwt.go
+++ b/object/token_jwt.go
@@ -128,7 +128,7 @@ type UserWithoutThirdIdp struct {
 	LastSigninWrongTime string `xorm:"varchar(100)" json:"lastSigninWrongTime"`
 	SigninWrongTimes    int    `json:"signinWrongTimes"`

-	// ManagedAccounts []ManagedAccount `xorm:"managedAccounts blob" json:"managedAccounts"`
+	ManagedAccounts []ManagedAccount `xorm:"managedAccounts blob" json:"managedAccounts"`
 }

 type ClaimsShort struct {
@@ -254,6 +254,8 @@ func getUserWithoutThirdIdp(user *User) *UserWithoutThirdIdp {

 		LastSigninWrongTime: user.LastSigninWrongTime,
 		SigninWrongTimes:    user.SigninWrongTimes,
+
+		ManagedAccounts: user.ManagedAccounts,
 	}

 	return res
--- a/routers/authz_filter.go
+++ b/routers/authz_filter.go
@@ -56,7 +56,7 @@ func getSubject(ctx *context.Context) (string, string) {
 	return util.GetOwnerAndNameFromId(username)
 }

-func getObject(ctx *context.Context) (string, string) {
+func getObject(ctx *context.Context) (string, string, error) {
 	method := ctx.Request.Method
 	path := ctx.Request.URL.Path

@@ -65,13 +65,13 @@ func getObject(ctx *context.Context) (string, string) {
 			if ctx.Input.Query("id") == "/" {
 				adapterId := ctx.Input.Query("adapterId")
 				if adapterId != "" {
-					return util.GetOwnerAndNameFromIdNoCheck(adapterId)
+					return util.GetOwnerAndNameFromIdWithError(adapterId)
 				}
 			} else {
 				// query == "?id=built-in/admin"
 				id := ctx.Input.Query("id")
 				if id != "" {
-					return util.GetOwnerAndNameFromIdNoCheck(id)
+					return util.GetOwnerAndNameFromIdWithError(id)
 				}
 			}
 		}
@@ -80,34 +80,34 @@ func getObject(ctx *context.Context) (string, string) {
 			// query == "?id=built-in/admin"
 			id := ctx.Input.Query("id")
 			if id != "" {
-				return util.GetOwnerAndNameFromIdNoCheck(id)
+				return util.GetOwnerAndNameFromIdWithError(id)
 			}
 		}

 		owner := ctx.Input.Query("owner")
 		if owner != "" {
-			return owner, ""
+			return owner, "", nil
 		}

-		return "", ""
+		return "", "", nil
 	} else {
 		if path == "/api/add-policy" || path == "/api/remove-policy" || path == "/api/update-policy" {
 			id := ctx.Input.Query("id")
 			if id != "" {
-				return util.GetOwnerAndNameFromIdNoCheck(id)
+				return util.GetOwnerAndNameFromIdWithError(id)
 			}
 		}

 		body := ctx.Input.RequestBody
 		if len(body) == 0 {
-			return ctx.Request.Form.Get("owner"), ctx.Request.Form.Get("name")
+			return ctx.Request.Form.Get("owner"), ctx.Request.Form.Get("name"), nil
 		}

 		var obj Object
 		err := json.Unmarshal(body, &obj)
 		if err != nil {
-			// panic(err)
-			return "", ""
+			// this is not error
+			return "", "", nil
 		}

 		if path == "/api/delete-resource" {
@@ -117,7 +117,7 @@ func getObject(ctx *context.Context) (string, string) {
 			}
 		}

-		return obj.Owner, obj.Name
+		return obj.Owner, obj.Name, nil
 	}
 }

@@ -183,7 +183,12 @@ func ApiFilter(ctx *context.Context) {

 	objOwner, objName := "", ""
 	if urlPath != "/api/get-app-login" && urlPath != "/api/get-resource" {
-		objOwner, objName = getObject(ctx)
+		var err error
+		objOwner, objName, err = getObject(ctx)
+		if err != nil {
+			responseError(ctx, err.Error())
+			return
+		}
 	}

 	if strings.HasPrefix(urlPath, "/api/notify-payment") {
--- a/routers/auto_signin_filter.go
+++ b/routers/auto_signin_filter.go
@@ -67,6 +67,17 @@ func AutoSigninFilter(ctx *context.Context) {
 		return
 	}

+	accessKey := ctx.Input.Query("accessKey")
+	accessSecret := ctx.Input.Query("accessSecret")
+	if accessKey != "" && accessSecret != "" {
+		userId, err := getUsernameByKeys(ctx)
+		if err != nil {
+			responseError(ctx, err.Error())
+		}
+
+		setSessionUser(ctx, userId)
+	}
+
 	// "/page?clientId=123&clientSecret=456"
 	userId, err := getUsernameByClientIdSecret(ctx)
 	if err != nil {
--- a/util/string.go
+++ b/util/string.go
@@ -131,6 +131,15 @@ func GetOwnerAndNameFromId(id string) (string, string) {
 	return tokens[0], tokens[1]
 }

+func GetOwnerAndNameFromIdWithError(id string) (string, string, error) {
+	tokens := strings.Split(id, "/")
+	if len(tokens) != 2 {
+		return "", "", errors.New("GetOwnerAndNameFromId() error, wrong token count for ID: " + id)
+	}
+
+	return tokens[0], tokens[1], nil
+}
+
 func GetOwnerFromId(id string) string {
 	tokens := strings.Split(id, "/")
 	if len(tokens) != 2 {
--- a/web/src/AdapterListPage.js
+++ b/web/src/AdapterListPage.js
@@ -56,9 +56,11 @@ class AdapterListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/ApplicationListPage.js
+++ b/web/src/ApplicationListPage.js
@@ -97,9 +97,11 @@ class ApplicationListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/CertListPage.js
+++ b/web/src/CertListPage.js
@@ -73,9 +73,11 @@ class CertListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/EnforcerListPage.js
+++ b/web/src/EnforcerListPage.js
@@ -55,9 +55,11 @@ class EnforcerListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/GroupListPage.js
+++ b/web/src/GroupListPage.js
@@ -84,9 +84,11 @@ class GroupListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/InvitationListPage.js
+++ b/web/src/InvitationListPage.js
@@ -68,9 +68,11 @@ class InvitationListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/LdapEditPage.js
+++ b/web/src/LdapEditPage.js
@@ -13,12 +13,13 @@
 // limitations under the License.

 import React from "react";
-import {Button, Card, Col, Input, InputNumber, Row, Select, Switch} from "antd";
-import {EyeInvisibleOutlined, EyeTwoTone} from "@ant-design/icons";
+import {Button, Card, Col, Input, InputNumber, Row, Select, Space, Switch} from "antd";
+import {EyeInvisibleOutlined, EyeTwoTone, HolderOutlined, UsergroupAddOutlined} from "@ant-design/icons";
 import * as LddpBackend from "./backend/LdapBackend";
 import * as OrganizationBackend from "./backend/OrganizationBackend";
 import * as Setting from "./Setting";
 import i18next from "i18next";
+import * as GroupBackend from "./backend/GroupBackend";

 const {Option} = Select;

@@ -30,12 +31,14 @@ class LdapEditPage extends React.Component {
      organizationName: props.match.params.organizationName,
      ldap: null,
      organizations: [],
+      groups: null,
    };
  }

  UNSAFE_componentWillMount() {
    this.getLdap();
    this.getOrganizations();
+    this.getGroups();
  }

  getLdap() {
@@ -60,6 +63,17 @@ class LdapEditPage extends React.Component {
      });
  }

+  getGroups() {
+    GroupBackend.getGroups(this.state.organizationName)
+      .then((res) => {
+        if (res.status === "ok") {
+          this.setState({
+            groups: res.data,
+          });
+        }
+      });
+  }
+
  updateLdapField(key, value) {
    this.setState((prevState) => {
      prevState.ldap[key] = value;
@@ -214,6 +228,31 @@ class LdapEditPage extends React.Component {
            />
          </Col>
        </Row>
+        <Row style={{marginTop: "20px"}} >
+          <Col style={{lineHeight: "32px", textAlign: "right", paddingRight: "25px"}} span={3}>
+            {Setting.getLabel(i18next.t("ldap:Default group"), i18next.t("ldap:Default group - Tooltip"))} :
+          </Col>
+          <Col span={21}>
+            <Select virtual={false} style={{width: "100%"}} value={this.state.ldap.defaultGroup ?? []} onChange={(value => {
+              this.updateLdapField("defaultGroup", value);
+            })}
+            >
+              <Option key={""} value={""}>
+                <Space>
+                  {i18next.t("general:Default")}
+                </Space>
+              </Option>
+              {
+                this.state.groups?.map((group) => <Option key={group.name} value={`${group.owner}/${group.name}`}>
+                  <Space>
+                    {group.type === "Physical" ? <UsergroupAddOutlined /> : <HolderOutlined />}
+                    {group.displayName}
+                  </Space>
+                </Option>)
+              }
+            </Select>
+          </Col>
+        </Row>
        <Row style={{marginTop: "20px"}}>
          <Col style={{lineHeight: "32px", textAlign: "right", paddingRight: "25px"}} span={3}>
            {Setting.getLabel(i18next.t("ldap:Auto Sync"), i18next.t("ldap:Auto Sync - Tooltip"))} :
--- a/web/src/ModelListPage.js
+++ b/web/src/ModelListPage.js
@@ -72,9 +72,11 @@ class ModelListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/OrganizationListPage.js
+++ b/web/src/OrganizationListPage.js
@@ -115,11 +115,11 @@ class OrganizationListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
+          this.fetch({
            pagination: {
              ...this.state.pagination,
-              total: this.state.pagination.total - 1},
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
          window.dispatchEvent(new Event("storageOrganizationsChanged"));
        } else {
--- a/web/src/PaymentListPage.js
+++ b/web/src/PaymentListPage.js
@@ -70,9 +70,11 @@ class PaymentListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/PermissionListPage.js
+++ b/web/src/PermissionListPage.js
@@ -69,9 +69,11 @@ class PermissionListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/PlanListPage.js
+++ b/web/src/PlanListPage.js
@@ -63,9 +63,11 @@ class PlanListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/PricingListPage.js
+++ b/web/src/PricingListPage.js
@@ -59,9 +59,11 @@ class PricingListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/ProductListPage.js
+++ b/web/src/ProductListPage.js
@@ -65,9 +65,11 @@ class ProductListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/ProviderEditPage.js
+++ b/web/src/ProviderEditPage.js
@@ -906,7 +906,7 @@ class ProviderEditPage extends React.Component {
                </Col>
              </Row>
            )}
-            {["Custom HTTP SMS", "Google Cloud Storage", "Qiniu Cloud Kodo", "Synology"].includes(this.state.provider.type) ? null : (
+            {["Custom HTTP SMS", "Qiniu Cloud Kodo", "Synology"].includes(this.state.provider.type) ? null : (
              <Row style={{marginTop: "20px"}} >
                <Col style={{marginTop: "5px"}} span={2}>
                  {Setting.getLabel(i18next.t("provider:Domain"), i18next.t("provider:Domain - Tooltip"))} :
--- a/web/src/ProviderListPage.js
+++ b/web/src/ProviderListPage.js
@@ -76,9 +76,11 @@ class ProviderListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/ResourceListPage.js
+++ b/web/src/ResourceListPage.js
@@ -40,9 +40,11 @@ class ResourceListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/RoleListPage.js
+++ b/web/src/RoleListPage.js
@@ -61,9 +61,11 @@ class RoleListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/SessionListPage.js
+++ b/web/src/SessionListPage.js
@@ -27,9 +27,11 @@ class SessionListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/SubscriptionListPage.js
+++ b/web/src/SubscriptionListPage.js
@@ -64,9 +64,11 @@ class SubscriptionListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/SyncerListPage.js
+++ b/web/src/SyncerListPage.js
@@ -69,9 +69,11 @@ class SyncerListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/TokenListPage.js
+++ b/web/src/TokenListPage.js
@@ -61,9 +61,11 @@ class TokenListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/TransactionListPage.js
+++ b/web/src/TransactionListPage.js
@@ -54,9 +54,11 @@ class TransactionListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/UserListPage.js
+++ b/web/src/UserListPage.js
@@ -110,9 +110,11 @@ class UserListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/WebhookListPage.js
+++ b/web/src/WebhookListPage.js
@@ -61,9 +61,11 @@ class WebhookListPage extends BaseListPage {
      .then((res) => {
        if (res.status === "ok") {
          Setting.showMessage("success", i18next.t("general:Successfully deleted"));
-          this.setState({
-            data: Setting.deleteRow(this.state.data, i),
-            pagination: {total: this.state.pagination.total - 1},
+          this.fetch({
+            pagination: {
+              ...this.state.pagination,
+              current: this.state.pagination.current > 1 && this.state.data.length === 1 ? this.state.pagination.current - 1 : this.state.pagination.current,
+            },
          });
        } else {
          Setting.showMessage("error", `${i18next.t("general:Failed to delete")}: ${res.msg}`);
--- a/web/src/index.js
+++ b/web/src/index.js
@@ -24,6 +24,12 @@ import * as serviceWorker from "./serviceWorker";
 import {BrowserRouter} from "react-router-dom";
 import "./backend/FetchFilter";

+if (!String.prototype.replaceAll) {
+  String.prototype.replaceAll = function(search, replace) {
+    return this.split(search).join(replace);
+  };
+}
+
 const container = document.getElementById("root");

 const app = createRoot(container);
--- a/web/src/locales/ar/data.json
+++ b/web/src/locales/ar/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/cs/data.json
+++ b/web/src/locales/cs/data.json
@@ -234,6 +234,8 @@
    "Enable": "Povolit",
    "Enable dark logo": "Povolit tmavé logo",
    "Enable dark logo - Tooltip": "Povolit tmavé logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Povoleno",
    "Enabled successfully": "Úspěšně povoleno",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Pozvánky",
    "Is enabled": "Je povoleno",
    "Is enabled - Tooltip": "Nastavit, zda může být použito",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPy",
    "LDAPs - Tooltip": "LDAP servery",
    "Languages": "Jazyky",
@@ -441,6 +445,8 @@
    "Base DN": "Základní DN",
    "Base DN - Tooltip": "Základní DN při vyhledávání v LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Upravit LDAP",
    "Enable SSL": "Povolit SSL",
    "Enable SSL - Tooltip": "Zda povolit SSL",
@@ -521,7 +527,7 @@
    "Failed to initiate MFA": "Nepodařilo se zahájit MFA",
    "Have problems?": "Máte problémy?",
    "Multi-factor authentication": "Vícefaktorové ověřování",
-    "Multi-factor authentication - Tooltip": "Dvoufaktorové ověřování - Tooltip",
+    "Multi-factor authentication - Tooltip ": "Dvoufaktorové ověřování - Tooltip",
    "Multi-factor authentication description": "Popis dvoufaktorového ověřování",
    "Multi-factor methods": "Metody dvoufaktorového ověřování",
    "Multi-factor recover": "Obnovení dvoufaktorového ověřování",
@@ -551,6 +557,11 @@
    "Your phone is": "Váš telefon je",
    "preferred": "preferované"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Upravit model",
    "Model text": "Text modelu",
@@ -1136,6 +1147,7 @@
    "Link": "Odkaz",
    "Location": "Místo",
    "Location - Tooltip": "Město bydliště",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Spravované účty",
    "Modify password...": "Změnit heslo...",
    "Multi-factor authentication": "Vícefaktorové ověřování",
--- a/web/src/locales/de/data.json
+++ b/web/src/locales/de/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Ist aktiviert",
    "Is enabled - Tooltip": "Festlegen, ob es verwendet werden kann",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP-Server",
    "Languages": "Sprachen",
@@ -441,6 +445,8 @@
    "Base DN": "Basis-DN",
    "Base DN - Tooltip": "Basis-DN während der LDAP-Suche",
    "CN": "KN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "LDAP bearbeiten",
    "Enable SSL": "Aktivieren Sie SSL",
    "Enable SSL - Tooltip": "Ob SSL aktiviert werden soll",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Modell bearbeiten",
    "Model text": "Modelltext",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Ort",
    "Location - Tooltip": "Stadt des Wohnsitzes",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Verwaltete Konten",
    "Modify password...": "Passwort ändern...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/en/data.json
+++ b/web/src/locales/en/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/es/data.json
+++ b/web/src/locales/es/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Está habilitado",
    "Is enabled - Tooltip": "Establecer si se puede usar",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs (Secure LDAP)",
    "LDAPs - Tooltip": "Servidores LDAP",
    "Languages": "Idiomas",
@@ -441,6 +445,8 @@
    "Base DN": "DN base",
    "Base DN - Tooltip": "Base DN durante la búsqueda LDAP",
    "CN": "CN (siglas en inglés) podría traducirse como \"Red de Comunicaciones\". Sin embargo, sin más contexto, no es posible saber cuál es el significado exacto de estas siglas",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Editar LDAP",
    "Enable SSL": "Habilitar SSL",
    "Enable SSL - Tooltip": "Si se habilita SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Editar modelo",
    "Model text": "Texto modelo",
@@ -1136,6 +1147,7 @@
    "Link": "Enlace",
    "Location": "Ubicación",
    "Location - Tooltip": "Ciudad de residencia",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Cuentas gestionadas",
    "Modify password...": "Modificar contraseña...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/fa/data.json
+++ b/web/src/locales/fa/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/fi/data.json
+++ b/web/src/locales/fi/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/fr/data.json
+++ b/web/src/locales/fr/data.json
@@ -234,6 +234,8 @@
    "Enable": "Activer",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Activé",
    "Enabled successfully": "Activé avec succès",
    "Enforcers": "Exécuteurs",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Est activé",
    "Is enabled - Tooltip": "Définir s'il peut être utilisé",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "Serveurs LDAP",
    "Languages": "Langues",
@@ -441,6 +445,8 @@
    "Base DN": "DN racine",
    "Base DN - Tooltip": "Le DN racine (base DN) lors de la recherche LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Modifier le LDAP",
    "Enable SSL": "Activer SSL",
    "Enable SSL - Tooltip": "Activer SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Votre téléphone est",
    "preferred": "préféré"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Modifier le modèle",
    "Model text": "Définition du modèle",
@@ -1136,6 +1147,7 @@
    "Link": "Lier",
    "Location": "Localisation",
    "Location - Tooltip": "Ville de résidence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Comptes gérés",
    "Modify password...": "Modifier le mot de passe...",
    "Multi-factor authentication": "Authentification multifacteur",
--- a/web/src/locales/he/data.json
+++ b/web/src/locales/he/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/id/data.json
+++ b/web/src/locales/id/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Diaktifkan",
    "Is enabled - Tooltip": "Atur apakah itu dapat digunakan",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "Server LDAP",
    "Languages": "Bahasa-bahasa",
@@ -441,6 +445,8 @@
    "Base DN": "DN dasar",
    "Base DN - Tooltip": "Base DN selama pencarian LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Mengedit LDAP",
    "Enable SSL": "Aktifkan SSL",
    "Enable SSL - Tooltip": "Apakah untuk mengaktifkan SSL?",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Mengedit Model",
    "Model text": "Teks Model",
@@ -1136,6 +1147,7 @@
    "Link": "Tautan",
    "Location": "Lokasi",
    "Location - Tooltip": "Kota tempat tinggal",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Akun yang dikelola",
    "Modify password...": "Mengubah kata sandi...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/it/data.json
+++ b/web/src/locales/it/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/ja/data.json
+++ b/web/src/locales/ja/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "可能になっています",
    "Is enabled - Tooltip": "使用可能かどうかを設定してください",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAP",
    "LDAPs - Tooltip": "LDAPサーバー",
    "Languages": "言語",
@@ -441,6 +445,8 @@
    "Base DN": "ベース DN",
    "Base DN - Tooltip": "LDAP検索中のBase DN",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "LDAPを編集",
    "Enable SSL": "SSL を有効にする",
    "Enable SSL - Tooltip": "SSLを有効にするかどうか",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "編集モデル",
    "Model text": "モデルテキスト",
@@ -1136,6 +1147,7 @@
    "Link": "リンク",
    "Location": "場所",
    "Location - Tooltip": "居住都市",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "管理アカウント",
    "Modify password...": "パスワードを変更する...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/kk/data.json
+++ b/web/src/locales/kk/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/ko/data.json
+++ b/web/src/locales/ko/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "활성화됩니다",
    "Is enabled - Tooltip": "사용 가능한 지 여부를 설정하세요",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP 서버",
    "Languages": "언어",
@@ -441,6 +445,8 @@
    "Base DN": "기본 DN",
    "Base DN - Tooltip": "LDAP 검색 중 기본 DN",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "LDAP 수정",
    "Enable SSL": "SSL 활성화",
    "Enable SSL - Tooltip": "SSL을 활성화할지 여부를 결정하십시오",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "편집 형태 모델",
    "Model text": "모델 텍스트",
@@ -1136,6 +1147,7 @@
    "Link": "링크",
    "Location": "장소",
    "Location - Tooltip": "거주 도시",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "관리 계정",
    "Modify password...": "비밀번호 수정하기...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/ms/data.json
+++ b/web/src/locales/ms/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/nl/data.json
+++ b/web/src/locales/nl/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/pl/data.json
+++ b/web/src/locales/pl/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/pt/data.json
+++ b/web/src/locales/pt/data.json
@@ -234,6 +234,8 @@
    "Enable": "Habilitar",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Habilitado",
    "Enabled successfully": "Habilitado com sucesso",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Está habilitado",
    "Is enabled - Tooltip": "Define se está habilitado",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "Servidores LDAP",
    "Languages": "Idiomas",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN durante a busca LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Editar LDAP",
    "Enable SSL": "Habilitar SSL",
    "Enable SSL - Tooltip": "Se habilitar o SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Editar Modelo",
    "Model text": "Texto do Modelo",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Localização",
    "Location - Tooltip": "Cidade de residência",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Contas gerenciadas",
    "Modify password...": "Modificar senha...",
    "Multi-factor authentication": "Autenticação de vários fatores",
--- a/web/src/locales/ru/data.json
+++ b/web/src/locales/ru/data.json
@@ -234,6 +234,8 @@
    "Enable": "Включить",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Включено",
    "Enabled successfully": "Успешно включено",
    "Enforcers": "Контролёры доступа",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Включен",
    "Is enabled - Tooltip": "Установить, может ли использоваться",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPы",
    "LDAPs - Tooltip": "LDAP серверы",
    "Languages": "Языки",
@@ -441,6 +445,8 @@
    "Base DN": "Базовый DN",
    "Base DN - Tooltip": "Базовый DN во время поиска LDAP",
    "CN": "КНР",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Изменить LDAP",
    "Enable SSL": "Включить SSL",
    "Enable SSL - Tooltip": "Перевод: Следует ли включать SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Ваш телефон",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Редактировать модель",
    "Model text": "Модельный текст",
@@ -1136,6 +1147,7 @@
    "Link": "Ссылка",
    "Location": "Местоположение",
    "Location - Tooltip": "Город проживания",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Управляемые аккаунты",
    "Modify password...": "Изменить пароль...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/sk/data.json
+++ b/web/src/locales/sk/data.json
@@ -234,6 +234,8 @@
    "Enable": "Povoliť",
    "Enable dark logo": "Povoliť tmavé logo",
    "Enable dark logo - Tooltip": "Povoliť tmavé logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Povolené",
    "Enabled successfully": "Úspešne povolené",
    "Enforcers": "Vynútitelia",
@@ -265,6 +267,8 @@
    "Invitations": "Pozvánky",
    "Is enabled": "Je povolené",
    "Is enabled - Tooltip": "Nastavte, či môže byť použitý",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAP",
    "LDAPs - Tooltip": "LDAP servery",
    "Languages": "Jazyky",
@@ -441,6 +445,8 @@
    "Base DN": "Základný DN",
    "Base DN - Tooltip": "Základný DN počas vyhľadávania LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Upraviť LDAP",
    "Enable SSL": "Povoliť SSL",
    "Enable SSL - Tooltip": "Či povoliť SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Váš telefón je",
    "preferred": "preferované"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Upraviť model",
    "Model text": "Text modelu",
@@ -1136,6 +1147,7 @@
    "Link": "Odkaz",
    "Location": "Miesto",
    "Location - Tooltip": "Mesto bydliska",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Spravované účty",
    "Modify password...": "Zmeniť heslo...",
    "Multi-factor authentication": "Viacfaktorová autentifikácia",
--- a/web/src/locales/sv/data.json
+++ b/web/src/locales/sv/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Is enabled",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Languages",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Edit Model",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/tr/data.json
+++ b/web/src/locales/tr/data.json
@@ -234,6 +234,8 @@
    "Enable": "Etkinleştir",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Etkin",
    "Enabled successfully": "Başarıyla etkinleştirildi",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Davetler",
    "Is enabled": "Aktif Mi?",
    "Is enabled - Tooltip": "Set whether it can use",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "LDAP servers",
    "Languages": "Diller",
@@ -441,6 +445,8 @@
    "Base DN": "Base DN",
    "Base DN - Tooltip": "Base DN during LDAP search",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Edit LDAP",
    "Enable SSL": "Enable SSL",
    "Enable SSL - Tooltip": "Whether to enable SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Telefon numaranız",
    "preferred": "tercih edilen"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Modeli Düzenle",
    "Model text": "Model text",
@@ -1136,6 +1147,7 @@
    "Link": "Link",
    "Location": "Location",
    "Location - Tooltip": "City of residence",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Managed accounts",
    "Modify password...": "Modify password...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/uk/data.json
+++ b/web/src/locales/uk/data.json
@@ -234,6 +234,8 @@
    "Enable": "Увімкнути",
    "Enable dark logo": "Увімкнути темний логотип",
    "Enable dark logo - Tooltip": "Увімкнути темний логотип",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Увімкнено",
    "Enabled successfully": "Успішно ввімкнено",
    "Enforcers": "Силовики",
@@ -265,6 +267,8 @@
    "Invitations": "Запрошення",
    "Is enabled": "Увімкнено",
    "Is enabled - Tooltip": "Встановіть, чи можна використовувати",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAP",
    "LDAPs - Tooltip": "Сервери LDAP",
    "Languages": "Мови",
@@ -441,6 +445,8 @@
    "Base DN": "Базовий DN",
    "Base DN - Tooltip": "Базовий DN під час пошуку LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Редагувати LDAP",
    "Enable SSL": "Увімкніть SSL",
    "Enable SSL - Tooltip": "Чи вмикати SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "Ваш телефон",
    "preferred": "бажаний"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Редагувати модель",
    "Model text": "Текст моделі",
@@ -1136,6 +1147,7 @@
    "Link": "Посилання",
    "Location": "Місцезнаходження",
    "Location - Tooltip": "Місто проживання",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Керовані облікові записи",
    "Modify password...": "Змінити пароль...",
    "Multi-factor authentication": "Багатофакторна аутентифікація",
--- a/web/src/locales/vi/data.json
+++ b/web/src/locales/vi/data.json
@@ -234,6 +234,8 @@
    "Enable": "Enable",
    "Enable dark logo": "Enable dark logo",
    "Enable dark logo - Tooltip": "Enable dark logo",
+    "Enable tour": "Enable tour",
+    "Enable tour - Tooltip": "Display tour for users",
    "Enabled": "Enabled",
    "Enabled successfully": "Enabled successfully",
    "Enforcers": "Enforcers",
@@ -265,6 +267,8 @@
    "Invitations": "Invitations",
    "Is enabled": "Đã được kích hoạt",
    "Is enabled - Tooltip": "Đặt liệu nó có thể sử dụng hay không",
+    "Is shared": "Is shared",
+    "Is shared - Tooltip": "Share this application with other organizations",
    "LDAPs": "LDAPs",
    "LDAPs - Tooltip": "Máy chủ LDAP",
    "Languages": "Ngôn ngữ",
@@ -441,6 +445,8 @@
    "Base DN": "DN cơ sở",
    "Base DN - Tooltip": "Đơn vị căn bản (Base DN) trong quá trình tìm kiếm LDAP",
    "CN": "CN",
+    "Default group": "Default group",
+    "Default group - Tooltip": "Group to which users belong after synchronization",
    "Edit LDAP": "Sửa LDAP",
    "Enable SSL": "Kích hoạt SSL",
    "Enable SSL - Tooltip": "Có nên kích hoạt SSL hay không?",
@@ -551,6 +557,11 @@
    "Your phone is": "Your phone is",
    "preferred": "preferred"
  },
+  "mfaAccount": {
+    "Account Name": "Account Name",
+    "Issuer": "Issuer",
+    "Secret Key": "Secret Key"
+  },
  "model": {
    "Edit Model": "Sửa mô hình",
    "Model text": "Văn bản mẫu",
@@ -1136,6 +1147,7 @@
    "Link": "Liên kết",
    "Location": "Vị trí",
    "Location - Tooltip": "Thành phố cư trú",
+    "MFA accounts": "MFA accounts",
    "Managed accounts": "Quản lý tài khoản",
    "Modify password...": "Sửa đổi mật khẩu...",
    "Multi-factor authentication": "Multi-factor authentication",
--- a/web/src/locales/zh/data.json
+++ b/web/src/locales/zh/data.json
@@ -234,6 +234,8 @@
    "Enable": "启用",
    "Enable dark logo": "开启暗黑Logo",
    "Enable dark logo - Tooltip": "开启暗黑Logo",
+    "Enable tour": "启用导引",
+    "Enable tour - Tooltip": "为用户显示导引",
    "Enabled": "已开启",
    "Enabled successfully": "启用成功",
    "Enforcers": "Casbin执行器",
@@ -265,6 +267,8 @@
    "Invitations": "邀请码",
    "Is enabled": "已启用",
    "Is enabled - Tooltip": "是否启用",
+    "Is shared": "是否共享",
+    "Is shared - Tooltip": "与其他组织共享此应用",
    "LDAPs": "LDAP",
    "LDAPs - Tooltip": "LDAPs",
    "Languages": "语言",
@@ -441,6 +445,8 @@
    "Base DN": "基本DN",
    "Base DN - Tooltip": "LDAP搜索时的基DN",
    "CN": "CN",
+    "Default group": "默认群组",
+    "Default group - Tooltip": "同步用户后用户所在的群组",
    "Edit LDAP": "编辑LDAP",
    "Enable SSL": "启用SSL",
    "Enable SSL - Tooltip": "是否启用SSL",
@@ -551,6 +557,11 @@
    "Your phone is": "你的手机号",
    "preferred": "首选"
  },
+  "mfaAccount": {
+    "Account Name": "账号名",
+    "Issuer": "Issuer",
+    "Secret Key": "密钥"
+  },
  "model": {
    "Edit Model": "编辑模型",
    "Model text": "模型文本",
@@ -1136,6 +1147,7 @@
    "Link": "绑定",
    "Location": "城市",
    "Location - Tooltip": "居住地址所在的城市",
+    "MFA accounts": "MFA账户",
    "Managed accounts": "托管账户",
    "Modify password...": "编辑密码...",
    "Multi-factor authentication": "多因素认证",
Author	SHA1	Message	Date
千石	65563fa0cd	feat: Ensure MFA email and phone are validated before enabling (#3143 ) Added validation checks to ensure that a user's email and phone number are provided before enabling MFA email and phone respectively. This fixes the issue where MFA could be enabled without these values, causing inconsistencies.	2024-08-26 08:40:22 +08:00
DacongDA	f2a94f671a	feat: complete i18n translation (#3141 ) * feat: complete i18n translation * fix: fix problem in cs/data	2024-08-24 23:27:59 +08:00
DacongDA	1460a0498f	feat: support assign a default group for synchronized from external openldap (#3140 ) * feat: support default sync group for ldap (with without add i18n translate) * feat: improve translation * feat: update all i18n translation * revert: remove new i18n translation	2024-08-24 00:12:52 +08:00
Yang Luo	adc63ea726	feat: fix wrong error alert in ApiFilter's getObject()	2024-08-23 23:36:55 +08:00
Yang Luo	0b8be016c5	feat: add enableErrorMask config	2024-08-23 22:19:17 +08:00
Yang Luo	986dcbbda1	feat: handle error in ApiFilter	2024-08-23 21:50:48 +08:00
Yang Luo	7d3920fb1f	feat: add ManagedAccounts to JWT	2024-08-20 22:23:58 +08:00
Yang Luo	b794ef87ee	feat: Revert "feat: support reCAPTCHA v3 captcha provider" (#3135 ) This reverts commit `a0d6f2125e`.	2024-08-20 17:56:53 +08:00
ZhaoYP 2001	a0d6f2125e	feat: support reCAPTCHA v3 captcha provider (#3130 )	2024-08-20 17:29:37 +08:00
Yang Luo	85cbb7d074	feat: add replaceAll polyfill to be compatible with Firefox 68	2024-08-17 18:37:21 +08:00
June	fdc1be9452	feat: add provider.Bucket to fileUrl response and TrimPrefix "/" before delete GCS object (#3129 ) * feat: add provider.Bucket to fileUrl response * feat: TrimPrefix "/" before Google Cloud Storage delete object	2024-08-17 11:46:58 +08:00
June	2bd7dabd33	feat: allow custom Domain of Google Cloud Storage Provider (#3128 )	2024-08-15 23:28:36 +08:00
June	9b9a58e7ac	feat: update casdoor/oss version to support Google Cloud's Application Default Credentials (#3125 )	2024-08-15 13:45:27 +08:00
Zheming Bao	38e389e8c8	feat: Pagination not updating after last item deletion (#3120 )	2024-08-13 16:09:16 +08:00
DacongDA	ab5fcf848e	feat: support accessKey and accessSecret login in AutoSigninFilter (#3117 )	2024-08-12 12:20:41 +08:00
Yang Luo	b4e51b4631	feat: improve error message in GetFailedSigninConfigByUser()	2024-08-10 09:31:46 +08:00