MMS OnPrem 1.5: Document new 2FA configuration options

Three new parameters for this page: http://mms.mongodb.com/help-hosted/current/reference/configuration/

mms.multiFactorAuth.require

• boolean, default is false
• Set to true to require two-factor authentication.
• If Twilio integration is not configured, two-factor authentication is offered via Google Authenticator.
• If Twilio integration is configured, users are offered a choice of Google Authenticator, SMS or Voice Call.
• When enabled, two-factor authentication is required on login, and on certain destructive operations within the application.

mms.multiFactorAuth.allowReset

• boolean, default is false
• Set to true to expose an email-based "Reset Two-Factor Authentication" flow similar to a standard "Reset Password" flow.
• To reset their two-factor authentication the user must
  • Be able to receive email at the address associated with their account
  • Know their password
  • Know the Agent API key for any MMS Group of which they are a member

mms.multiFactorAuth.issuer

• string
• If Google Authenticator is used, this string will show up as the issuer in the Google Authenticator app.
• If left blank, the domain name of the MMS installation is used.