How to activate multi-factor authentication for your employees

What is multi-factor authentication (MFA)? 

Multi-factor authentication (MFA) is a layered approach to securing data and applications, where it requires a user to present a combination of two or more credentials to verify a user's identity when logging in to an application or system.

With the extra layer of security, you can rest assured that your users are protected from potential malicious intent.   

How to activate and enforce Multi-factor authentication 

Only System administrators can activate MFA and to ensure a gradual roll-out of the new authentication method, all changes apply after the next login. 

1. Switch to the Admin view
2. Click Settings
3. Click Security
4. Toggle Use authenticator app

You can enforce MFA for the whole company or organisation or select specific roles or users:

• Enforce for all users
• Enforce for System administrators
• Enforce for individual users

Note: If you select Enforce for individual users, you need to go to each individual user in the User directory and click "Enforce MFA" on the user profile.

Deactivate Multi-factor authentication

Deactivation of MFA is not recommended. Please notify the person responsible for cyber/information security within your organisation before deactivating MFA. 

Toggle the Use authenticator app button mentioned above to turn it off. Remember that toggling off any of the "Enforce..." buttons don't actually turn off MFA, and users who activated MFA will still use it until they reset it.

Reset a user's MFA configuration

If a user can't sign in, a System administrator can reset the MFA configuration from the user directory:

1. Switch to the Admin view
2. Click Administration
3. Click User directory
4. Find the user in the user directory
5. Click on the user
6. Click Reset MFA
   
   

Changelog
2022-12-01 - Article created