In this article, you'll learn how to set up multi-factor authentication (MFA), which provides higher security for your user account.
Traditional authentication schemes require only a username and password. With MFA, you are prompted for your username and password plus an authentication code generated by an authenticator application. This is also sometimes known as two-factor authentication or 2FA. The code generated may be referred to as a one-time password (OTP).
Prerequisites
You'll need an authenticator application on your mobile phone. Most OTP-compliant (one-time password) applications can be used as the second factor for MFA logins to IT Glue, including:
Android
Google | Authy | Duo | 1Password | Lastpass | Salesforce | Microsoft | WatchGuard
iPhone
Google | Authy | Duo | 1Password | Lastpass | Salesforce | Microsoft | IBM
| WatchGuard
If the authenticator app cannot locate a QR code scanner app on your mobile device, you might be prompted to download and install one. Go to the app store for your device, search for “QR code scanner,” choose one, and install it.
Your phone’s time MUST be synced with internet time, or you may get a login error.
Instructions
Click on your name in the top-right corner of any screen and then select My Settings from the drop-down menu.
Under MFA Settings, click Enable MFA.
Open the authenticator application you installed above and scan the QR code that is displayed in the Multi-Factor Authentication (MFA) dialog box.
Alternatively, you can use the manual configuration option by clicking on Show secret key for manual configuration and then entering the secret key in the authenticator application.In the Verify MFA Code box, enter the MFA code from the authenticator application to verify the pairing and then click Save.
After you set up your MFA, you are returned to the Edit Profile screen where you can generate a recovery code. Store your recovery code in a safe place, such as an encrypted notes app. You can regenerate this code at any time. Note that the code generated earlier will be invalidated.
If there are any problems performing these instructions:
Check that the phone’s time is synced with internet time.
Try the manual configuration (secret key) option instead of the QR code.
Reboot the phone.
Common Questions
Can I enroll more than one device at a time?
Yes, you can enroll more than one device at a time. If you enable one, finish the process, and then enable another, it disables the first one. But, if you enable them both by scanning the same QR code (as shown in the Multi-Factor Authentication (MFA) dialog box further above), then they should both work. Although not required, having more than one device enrolled can help you avoid difficulties authenticating if you lose or don’t have your only enrolled device with you.
How do I log in with my recovery code?
If you don't have access to the mobile device associated with your MFA settings, enter your recovery code into the MFA Code field when you log in. This code can only be used once.
Related articles