Smartstaff
2,091
edits
Changes
m
Updated for instructions on setting up verification code via email or SMS
[[File:Authentication Options.png|thumb|none|800px|Authentication Options]]
===Setting Up Verification Codes for Email===
The easiest way to set up MFA is through the email that was used for user registration and login. Be sure to follow the instructions carefully to avoid accidentally locking yourself or others out of their accounts.
# Go to '''Menu Icon''' > '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies''' and then scroll down to the section marked '''Authentication Options'''.
# Toggle on '''Enable Multi-Factor Authentication'''. You will see additional settings displayed for different authentication methods.
# Under the '''Roles with Verification Code via SMS or Email''' setting, you will need to decide which roles need to be authenticated via a verification code sent through the email address used for login. Ensure that users assigned to this role have not opted out of receiving system emails. Click the '''Save''' button at the bottom of the page to activate changes.<br /> [[File:2022-11-ticket-139210-3.png|thumb|none|500px]]
===Logging in with a Verification Code from Email===
When a user has been assigned a role that requires a verification code, they can login using the following steps:
# When the user logs in using their email and password, they will be prompted to enter a verification code that was sent to their email. <br /> [[File:2022-11-ticket-139210-4.png|thumb|none|500px]]
# The user can check their email to copy the verification number. <br /> [[File:2022-11-ticket-139210-5.png|thumb|none|500px]]
# Enter the verification code into the field and then click '''Submit''' to finish authenticated login.
=Configuration - Advanced=
==='''NOTE:''' When enabling MFA for use with TOTP all existing users in roles that will have 2-Factor enabled must first scan their code into an authenticator app.===
:# Select the User menu from the top right.