Enable Multi-Factor Authentication (MFA)

Synopsis

This guide explains how to enable Multi-Factor Authentication (MFA) for an entity in the Partner Portal.

Applicable to

All Partner Portal accounts

Prerequisite

  • You must have an entity in the Partner Portal
  • You must be an administrator in the Partner Portal

How to

Multi-Factor Authentication (MFA) is a simple best practice that adds an extra layer of protection on top of your username and password. With MFA enabled, when a user signs in to the portal, they will be prompted for their username and password (the first factor - what they know), as well as for an authentication code from the 2nd factor they have configured. Taken together, these multiple factors provide increased security for your account.

 

Enabling MFA on your entity will affect all your users, as well as any entities under your account. It will also make sure that any user accessing your entity must be MFA compliant.

Step 1

Log in to the Partner Portal as an administrator, select the Administration section on the left, and then the Security tab at the top.

  

Enable_MFA_1

 

Step 2

In the Resource Access section, use the slider to Enable MFA for the entity.

 

Enable_MFA_2

 

Step 3

Select the MFA method(s) you want to make available.


OPTIONS

Time-based one time password (TOTP)

A time-based one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. It requires an authenticator app (ex: Google Authenticator).

Text Message (SMS)

A one-time code is sent by text message (SMS) to the user each time they log into your account to verify their identity.

Email

An email containing a one-time passcode will be sent to your user's mailbox every time they sign into your account to validate their identity.

 

The next time any user in the entity logs in to the Partner Portal, they will be forced to go through the MFA setup process.