This article explains how Multi-Factor Authentication (MFA) works in Blackpurl, how to select and set up an authenticator, and what to do if you need to switch to a new authenticator device. For background on what MFA is and why it is required, see Multi-Factor Authentication (MFA) Explained.
Selecting and Setting Up Your Authenticator
To use MFA in Blackpurl, your dealership must choose an authenticator and have it installed before users log in. An authenticator is a security application that generates a unique, time-based, one-time password. This code is used alongside your regular username and password to verify your identity each time you log in — providing an extra layer of security.
Important: Blackpurl Support cannot assist with authenticator setup or troubleshooting. If your dealership encounters issues with your chosen authenticator, contact your IT team.
Once your authenticator is set up, MFA will be active the next time you log into Blackpurl and you will be prompted for the code your authenticator generates.
Supported Authentication Methods
Blackpurl uses Salesforce's MFA functionality, so any authentication method supported by Salesforce is compatible. Blackpurl does not recommend any particular authenticator, but the following options are available for your dealership or IT team to choose from:
Salesforce Authenticator — available on the App Store and Google Play
Time-based one-time passcode (TOTP) apps — such as Google Authenticator and Microsoft Authenticator (available on mobile and desktop), or Authy (mobile only)
Security keys — hardware keys that support WebAuthn or U2F, such as Yubico's YubiKey or Google's Titan Security Key
Built-in authenticators — such as Touch ID, Face ID, or Windows Hello
Using the Salesforce Authenticator App
If your dealership chooses the Salesforce Authenticator app, the steps below describe the setup experience. Pass this information to your IT person.
Setting Up the Salesforce Authenticator
Log in to Blackpurl with your username and password on the regular login screen.
You will be prompted to connect the Salesforce Authenticator app.
On your smart device, install the Salesforce Authenticator app from the App Store or Google Play. After installing, open the app.
Tap Add an Account in the app. The app will display a two-word code.
Type the two-word code from the app into the login screen. Alternatively, select Choose Another Verification Method at the bottom of the login screen and use the Scan QR Code option.
Tap Connect in the app. The app will confirm the account has been linked.
Future Logins with Salesforce Authenticator
After setup is complete, each time you provide your username and password, you will receive a push notification from the Salesforce Authenticator app on your device.
Tapping the notification opens an approval prompt. Tap Approve to complete the login.
After a couple of approvals from the same location — assuming the app has been granted location permission — the app will offer an Always approve from this location option. Enabling this and tapping Approve one final time allows the app to auto-approve future logins made from that location, as long as you have your device with you.
Using the Google Authenticator App
If your dealership chooses the Google Authenticator app, the steps below describe the setup experience. Pass this information to your IT person.
Log in to Blackpurl with your username and password, then select Use Verification Code from an Authenticator App on the MFA prompt.
Click Continue. A new screen opens displaying a QR code.
On your mobile device, open the Google Authenticator app and tap the + icon to add a new account.
Select Scan a QR code and scan the QR code displayed on the Blackpurl login screen.
The account is added to the app and a time-based authentication code is displayed. Enter this code on the Blackpurl login screen to complete verification.
After successful verification, you are logged in to Blackpurl. On future logins, open the Google Authenticator app to retrieve your current code and enter it when prompted.
Using the Security Key Method
If your dealership uses a hardware security key (such as a YubiKey or Titan Security Key), the steps below describe how to connect it as your MFA method.
Log in to Blackpurl with your username and password. On the MFA prompt, select Choose Another Verification Method.
On the next screen, select Use a Universal Second Factor (U2F) or WebAuthn (FIDO2) key.
Insert your security key into the device and click Register to complete the process.
Click Finish. The security key is now verified as the MFA method for the account.
On all future logins, each user will need to insert their security key when logging in to their account.
What the MFA Login Screens Look Like in Blackpurl
Once your authenticator is set up, the Blackpurl login process works as follows each time you sign in.
Step 1 — Go to the Blackpurl login page and enter your username and password.
Step 2 — The MFA Verify Your Identity screen appears. This screen displays a Salesforce branding, which is expected — Salesforce is the underlying platform provider for Blackpurl.
Step 3 — Open your authenticator app to retrieve your current verification code. Enter the code in the relevant field and click Verify.
Once verification is complete, you are logged in to Blackpurl.
Changing Your Authenticator
You may need to change your authenticator in situations such as:
You have purchased a new mobile phone and your authenticator was set up on your old device
Your authenticator was set up on another person's device and that person has since left the dealership
In either case, contact Blackpurl Support and provide your username. Ask Support to remove the existing authenticator from your account. Once Support confirms the authenticator has been removed, set up the authenticator on your new device. The next time you log in to Blackpurl, you will be guided through the MFA setup process again.