Multi-Factor Authentication (MFA), sometimes referred to as Two-Factor Authentication, provides enhanced security by requiring a hardware based authentication device (like a phone) in addition to your standard username and password to access the system. This additional security measure ensures that unauthorized users cannot login to your account without access to your phone, even if they have your username and password.
For maximum security, it is recommended that MFA be enabled and required whenever possible.
Enabling Multi-Factor Authentication (MFA)
All users in the system with an active login are able to set up MFA via their profile. To do this, each user should click their name in the top right corner to access their user profile and then click Edit > MFA Security. The user will now be able to configure MFA with a personal MFA device (i.e. a smart phone).
Requiring MFA by User Role
By default, the system does not force each user in your system to utilize MFA. If you wish to require users to set up MFA, you can achieve this by configuring each user role to Require Multi-Factor Authentication.
When MFA is required on a user role, each user assigned to that user role who logs into the system will be prompted to set up MFA before they can continue to use the system.
Tip: Before requiring MFA, it may be useful to review compliance reporting (see below) to see how many users in the given role have not yet set up MFA on their account. It is usually a good idea to have most users in a role set up MFA ahead of time so a majority of users aren't unexpectedly locked out of the system once MFA becomes required.
Compliance Reporting
If your company policy requires certain types of individuals to utilize MFA, Trackops offers a Security Checkup report on your Reports tab that will show you all users in your system who do not have MFA enabled. You can locate this report by clicking Reports, and then clicking Security Checkup to get started.