Configure Multi-Factor Authentication

If you are planning to create a Login Policy with Email as an authentication method for your users, be sure that the Email Manager component in this application is configured and running. Additionally, employees must have an email address listed in the Authentication Email Address field located in My Info > General.

Note:

This application will automatically use the email located in the employee’s Contact Methods when the Authentication Email Address field is undefined upon initial registration. A user can change the authentication email address at any time and they can choose a new email if desired as long as Person: Edit Basic is granted in their Authority. To add or edit the Authentication Email Address for others, the user will need Person: Edit Authentication Email Address granted.

Review Login Policy concept and field reference topics before you begin this task.

To edit or create a Login Policy with multi-factor authentication (MFA) enabled:

  1. Select a login policy and click Edit; or click Add to create a login policy.
  2. Name the login policy.
  3. Go to the Multi-factor Authentication section.
  4. In Multi-Factor Authentication Method, choose one or more of the following options:

    • Authenticator App

    • Email
  5. Configure the remaining fields as desired.
  6. Click Save.

    Upon save, the Clear TOTP setting enables when Authenticator App is selected. Clear VCA Settings enables when Email is selected.

Parent topic: Setup Security