Multi-Factor Authentication, also referred to as MFA, is an account security protocol that allows you to securely verify your Clubworx login by allowing multiple methods to authenticate identity. This extra layer of security requires the user to enter their password, and has more authentication channels and the ability to have multiple authentication options enabled at once.
In this article, we will cover:
The following MFA options (i.e., modes for receiving the 6 digit MFA code) will be available via:
Email
Authenticator app
SMS and Voice call (only available to users that have verified their phone number from their My Profile page)
Multi Factor Authentication can be enabled for users individually, or can be enabled for all users at once.
How to set up Multi-factor Authentication
To enable Multi-Factor Authentication, go to Settings> Users.
A. To enable MFA for all users at once, click on the MFA Policy option at the top right hand side of the screen. Select to enable MFA for all users. You can also choose if you would like to allow users to turn this off for their own login.
B. To enable MFA for selected users only, click on the MFA button next to their user profile and enable MFA for that specific user. Again, you will have the option to allow users to disable MFA for their own login or not.
Once MFA is enabled for one or more users, next time they try to login to their Clubworx account they will be guided through the set up process.
The user will have the option to either receive a code via email or SMS if they have verified their number in Clubworx.
To set up MFA using SMS or voice call or via an Authenticator app, the user will need to head to their profile > Multi -Factor Authentication and follow the prompts for each of the following options:
For the Authenticator app option, they will have to install the device on their phone. This can be Authy or Google Authenticator.
Once they have installed and set up the Authenticator app, they should scan the QR code that appears on the screen. This will give them a code which will either appear in their Authenticator app or be sent via SMS.
Simply enter the code into the field provided on screen and this will log them into Clubworx.
When they log in in future, they will see a code appear in their Authenticator app. These codes are time sensitive and will time out and be replaced after one minute. This code just needs to be entered into the field to log into Clubworx.
How to disable the Email option for Multi-factor Authentication
You may want to remove email as an MFA channel to enhance security and ensure that only stronger authentication methods—like an authenticator app and SMS—are used to verify logins. Email can only be disabled as an MFA channel if the user has set up their Authenticator app, or has a verified phone number.
Steps to Disable the Email MFA Option
Log in to your Clubworx account.
Ensure you have access to Settings > Users.In Settings, click on Users.
Locate your username and click the MFA option beside it.
Select the option to Deactivate Email Channel.
A pop-up window will appear with more information about deactivating the email MFA channel.
Click Deactivate Email Channel to continue.
When prompted, enter your email address and the verification code sent to that address.
Once confirmed, the email MFA channel will be disabled, and it will no longer appear as an option the next time you log in.
If you have any further questions or queries, please don't hesitate to contact support at support@clubworx.com