Two-Factor Authentication
Enabling Two-factor Authentication
To improve security of your Engaging Networks accounts, you can enable “two-factor authentication” (2fA). In addition to requiring a password, your users will also need to install a “Google Authenticator” app on their mobile device, which will generate a random number to create the second factor of your authentication process.
Watch the video below for an introduction to Two Factor Authentication.
After logging in with their designated password for the first time after 2fA has been enabled, your users will see a screen similar to this:
In order to continue the login, they will need to download the Google Authenticator app onto their mobile device and either scan the on-screen QR code through the app with their phone’s camera, or manually type in the secret code which can also be displayed on the screen. A six digit code will then be displayed inside the app (which updates every 15 seconds) that will need to be entered before they can login to Engaging Networks, on this new screen:
This process is only required on first use. Subsequent logins for up to three months from the same browser and device will only require the username and password as normal.
Setting up two-factor authentication
There are two main ways to set up two-factor authentication (2FA); you can set it up for all your users, or enabled it on a user-by-user basis.
To enable 2FA for all users, go to Hello YOURNAME > Account settings > Users.
Click on the Manage 2fA icon in the upper right hand corner. You will see the following screen:
If you choose to Enable two factor authentication, all your users will be required to use the Google Authenticator app to complete logins to their Engaging Networks accounts.
Enabling two-factor authentication for individual users
If you only require certain individuals to use two-factor authentication, you can enable the functionality on a per-user basis. Open up the Users, and select Enable two factor authentication
As soon as a user has logged in once with the two-factor authentication system, you are able to select to reset their token:
Resetting the token will bring the user back to the setup stage for two-factor authentication.
If you’re experiencing trouble resetting the secret token, here is the process to reset the QR code.
Troubleshooting 2FA
If a user has lost their phone or had to replace it, a Super Admin can reset the 2FA setting and get access to the QR code for the Google Authenticator app.
Disable 2FA for User
Select the check box net to the User Type at the top left. Then Click the Disable 2FA button that appears. (Do not deselect the Enable two factor authentication checkbox).
You will then see this popup:
Click the Disable two factor authentication.
Enable 2FA again
Make sure the checkbox by User Type is selected and then click Enable 2FA button at the top of the screen.
You will then see this popup screen:
A popup will appear asking if you want to enable 2FA. Click the Enable two factor authentication button.
The next time the User logs in, they will see this screen:
User will see popup with QR Code or will be able to view a secret token to authenticate with Google Authenticator.