Multi-Factor Authentication (MFA) is a security-enhancing practice of requiring a person to perform more than one step, beyond email and password, for example, when logging into a system.
A person required to complete MFA triggers it by ...
- Initiating logging in, by providing a valid email address and password, from a device not remembered for MFA purposes.
- Initiating a password reset process and then providing a valid email address and password.
- Clicking a login in link on a device not remembered for MFA purposes.
This article will walk through the steps of setting up the Authentication App.
Before You Begin
Review the MFA Feature Overview and Settings. If you choose to require admins or non-admins to use MFA, then you must decide which verification mode for them to use; email or authentication app.
Initial App Setup
Any authenticator app available is able to be used. Examples of authenticator apps include:
- Google Authenticator
- Free OTP
- Microsoft Authenticator
Use of an authenticator app requires an initial setup to register at least one device. The code entry screen features a "manage MFA" checkbox that when checked allows the person add/remove registered devices. When there are no devices registered for the person, the box is checked by default and cannot be unchecked.
When "manage MFA" is triggered by that box being checked:
- The system shows the "Authenticator application page".
- Click "Add new Authenticator".
- User opens their preferred authenticator app and choses to add a new application.
- User enters the code from the app into the code entry screen.
- User clicks Submit (device nickname optional).
- The system validates the code and returns the user to the "Authenticator application page".
- User clicks "Continue to Application" to go to ShulCloud.
Example: The "Manage MFA" screen is where people can add/remove registered devices;
"Continue to Application" takes the person to ShulCloud.
Example: Authenticator App setup screen.
Related Resources
- Multi-Factor Authentication (Feature Overview)
- Multi-Factor Authentication Verification Mode: Email (Topic)
- Multi-Factor Authentication Verification mode: Authentication App (Topic)
- Multi-Factor Authentication Settings (Overview)
- Multi-Factor Authentication Settings (Reference)
- Multi-Factor Authentication: Audit Log
- Multi-Factor Authentication: Code Emails
- Multi-Factor Authentication: Log in as User
- Multi-Factor Authentication: Login Links
- Multi-Factor Authenication: "Remember Me"
- Multi-Factor Authentication: Troubleshooting