Risk Alive offers Two-Factor Authentication (2FA) to all client organizations and each client organization can determine if and when 2FA should be used when setting up new users.
Setting Up New Users
Administrators have the ability to enable 2FA for any user during the New User setup process. Begin setting up a new user by clicking the "Manage Users" link at the top of the company Dashboard page (link visible to Administrators only).
When creating a new user, Administrators have the option to turn on 2FA via the checkbox above the Submit button.
Once the user is configured by the Administrator, the new user will receive an email from Risk Alive with a link to complete the setup of their account.
The new user will click on the link and be directed to Risk Alive where they will set their own password.
First Time Logging In with 2FA
At the first login attempt by the new user, the system will request a mobile phone number to be used for 2FA confirmation during subsequent login attempts. The system will not prompt the user to re-enter their phone number after the first login attempt with 2FA enabled.
Normal Log In Process
Each time a user logs into Risk Alive with 2FA enabled, the system will send a 5 digit code to the mobile number provided by the user during the first login attempt and the user will then enter this 5 digit code during login.
Once the user clicks the Confirm button, login will be complete.