====Multi-Factor Authentication Enabled by Default====
: ''Main Article: [[Multi-Factor Authentication]]''
Multi-factor authentication (MFA) using verification codes sent by email will be enabled for all systems to improve security. If you have already enabled MFA in your SmartSimple Cloud system and have assigned roles to a single-use verification code sent by email, this enhancement will NOT change your existing settings. You may change your MFA preferences after the upgrade but we recommend you adjust your settings prior to the upgrade. If you did not set up MFA prior to the upgrade, the 'Everyone' role will be added to the setting called '''Roles with Verification Code via SMS and Email'''. [[File:144811-MFA Everyone Role.png|thumb|none|800px|Systems that do not have MFA set up will automatically have the 'Everyone' role added to the single-use verification code setting.]]
[[File:144811Time-MFA Everyone Role.png|thumb|none|800px|Systems that do not have MFA set up based One-Time Password (TOTP) settings will automatically have the 'Everyone' role added to the single-use verification code settingNOT be affected.]]
Time-based One-Time Password (TOTP) settings will NOT be affected. <u>'''Note backup :'''</u> Backup environments will be allowed to send out MFA emails. If your backup environment is not sending out emails check that you have set up a default email at '''Menu Icon''' > '''Global Settings''' > '''Communications''' > '''Email Options and Security''' > Toggle on '''Enable Default From Address'''. Typically, you would enter something like donotreply@smartsimple.com. If you are using SMTP relay with an IP restriction for sending emails, ensure the IP of your backup environment is in your IP list.
<!-- 144811 - Apply MFA to all systems -->