Overview:
This feature allows Enterprise users to configure and manage Multi-Factor Authentication for their Enterprise and all accounts underneath the Enterprise. Enterprise users can now re-set their own Multi-Factor Authentication token. They can also re-set the Multi-Factor Authentication token for other users within the Enterprise.
Enabling Multi-Factor Authentication at the Enterprise level will provide enhanced security to the Enterprise and the accounts within it, lowering the risk of fraud, and protecting sensitive data.
How to Enable Enterprise Multi-Factor Authentication:
Navigation Pathway: Enterprise Homepage > Setup > Settings
Option 1: Enable Multi-factor authentication for this enterprise
Turning on this setting activates Multi-Factor Authentication for all users within the Enterprise. This will require that each Enterprise user download the authentication app approved by the Enterprise and configure Multi-Factor on the initial login after the service has been turned on. Enterprise users will be required to enter a Multi-Factor authentication code each time they log into the software.
Option 2: Configure Multi-factor authentication for all accounts within this enterprise
Turning on this setting prompts the Enterprise user to filter from a list of downstream accounts. If set to “All”, then all downstream accounts will be displayed and can be configured for Multi-Factor Authentication.
Enterprise: This option is only available for ‘Enterprise’ accounts. If enabled, the Enterprise users will be required to use Multi-Factor Authentication.
Admins & Employees: This option is only available for ‘Company’ accounts. If enabled, the Administrators and Employees will be required to use Multi-Factor Authentication.
Admins Only: This option is only available for ‘Company’ accounts. If enabled, only the Administrators will be required to use Multi-Factor Authentication. Employees are not affected.
Decline: This option is available for all account types. If enabled, the user is acknowledging that they are declining the Multi-Factor Authentication security feature for selected accounts.
Once these settings have been configured by the Enterprise, the individual accounts will not be permitted access to modify. See example below from an Admin account that has been configured for Multi-Factor by the Enterprise:
How to Re-Set an Enterprise User's Own Multi-Factor Authentication:
This feature allows Enterprise users logged into the software to re-set their own Multi-factor authentication.
Navigation Pathway: Enterprise Homepage > Click on Profile Picture > Reset 2-Factor > click Reset 2-Factor to confirm
After completing these steps, the user will be prompted to set up Multi-Factor by scanning the bar code with their authentication app and entering the authentication code to login.
How to Re-Set Another Enterprise User's Multi-Factor Authentication:
This feature allows for Enterprise users to re-set Multi-Factor for another Enterprise user.
Navigation Pathway: Enterprise Homepage > Setup > Users > Click the Enterprise User's Link > Click Reset 2-Factor Button
When the Enterprise user logs in, they will be prompted to configure Multi-Factor Authentication.
Enterprise Multi-Factor Logging:
All changes made by an Enterprise to the Multi-Factor settings described in this release can be found in the Access Log:
Navigation Pathway: Accounts > Click the company Info Icon > Access Log > Category: Security