==Time-Based One-Time Password (TOTP) Implementation==
===Enforce Setting up TOTP Multi-Factor Authentication for Particular Specific Roles===
:# In your SmartSimple instance (logged in as Global Admin), go to''' Menu Icon''' > '''Global Settings'''.<br /> [[File:GlobalSettings5.png|thumb|none|800px|The <strong>Global Settings</strong> link under the main menu]]
:# Go to the Security tab > '''Password and Activation Policies > '''Under “Authentication Options”, toggle on '''Enable Multi-Factor Authentication (MFA)'''.
===Determining Which Roles Can Reset TOTP===
:# In your SmartSimple instance (logged in as a '''Global Administrator''') in the '''Main Menu''', select '''Global Settings'''.<br /> [[File:GlobalSettings5.png|thumb|none|800px| The '''<strong>Global Settings''' </strong> link under the main menu]]
:# Navigate to the '''Users''' tab and click '''Roles'''.
:# '''Edit''' the role that you would like to grant the ability to reset TOTP on behalf of other users. For security best practice, this role should be an internal role only.