'''Multi-Factor Authentication''' is a method of authentication in which a user is granted access to your SmartSimple Cloud system only after successfully presenting two or more pieces of evidence to an authentication mechanism.
The security impact of '''Multi-Factor Authentication (MFA)''' is that while a user may might lose an access card their authentication device or get tricked into sharing a password, the odds of both happening to a single user are dramatically reduced. Using MFA therefore enhances an organization's ability to ensure that no one is using illegitimate means security by requiring users to gain accessidentify themselves with more than their login credentials.
SmartSimple Cloud supports two different approaches to ways of implementing '''Multi-Factor Authentication''':
* '''Time-based One-Time Password (TOTP) ''' via via an authenticator app., which is more secure and suitable for users with increased access such as global administrators or internal staff* '''Single Use Verification Code '''sent via email or SMS, which is better suited for external users or users who login infrequently
: '''IMPORTANT''': <span style="color: #ff0000;">'''YOU MUST'''</span> setup your authenticator app and link to your user account '''BEFORE''' enabling this type of MFA if you are an existing user. Additional steps are required. Please see below for details.
* '''Single Use Verification Code '''sent by either Email or SMS.
:: No additional configuration steps required for this type of MFA.
=Configuration - Essentials=
All settings related to multi-factor authentication are in a single location