Add Authenticator as a second factor

The Authenticator method is enabled by default on every tenant. To toggle please navigate to Tenants -> Edit Tenant -> Multi-Factor . The authenticator method is also referred to as Google Authenticator or Time-Based One-Time PasswordAn algorithm that computes a time-synchronized one-time password from a shared secret key and current timestamp. (TOTP).

Enable MFA method on Tenant (Admin Facing)#

The authenticator factor is enabled by default at the tenant level. It can be toggled on and off as needed.

/admin/tenant/edit/30663132...#multi-factor

Enable Authenticator Factor from Account Management (User Facing)#

/account/

1. Navigate back to your account page.
2. Click Manage two-factor
3. Click Add two-factor
4. There will be an option for an Authenticator app.

/account/two-factor/

/account/two-factor/enable

Next,

1. Scan the QR code with your favorite authenticator applicationAn app that generates time-based one-time passwords for multi-factor authentication. Many operating systems and password managers include an authenticator, and Wikipedia keeps a comparison of authenticator apps that includes free and open source options. such as Google Authenticator or Authy.
2. (Optional) Enter a name for this method (for example, Google Authenticator).
3. Enter the provided code.
4. Click the Enable button.

Recovery Codes (User Facing)#

Now you will be presented with recovery codesA code used to regain access to an account when the user loses their multi-factor authentication factors.. Save these in a safe space.

/account/two-factor/enable

Success!

Upon the next login, you will be prompted for a code displayed by the Authenticator App in addition to your password.

See It in Action (User Facing)#

With the Authenticator method enabled, if you log out and log back in you will be presented with the following screen in addition to the typical login screen.

/oauth2/authorize