Who is this article for?

Administrators who want to turn on additional security for the organisation's login process

Admin Console access is required

Multi-Factor Authentication (MFA) enhances security for users with internal authentication on Ideagen Hub. It does not apply to users logging in via external Single Sign-On (SSO) providers. 

This article explains how tenant administrators can enable or disable MFA for the organisation, and how to manage MFA settings at the individual user level. 

Enabling MFA

Email

To enable email MFA for your organisation:

1. Navigate to the Admin Console. 
2. Go to the Security Center.
3. Click Off next to Multi-Factor Authentication.

5. Set Require Multi-factor authentication to Yes.
6. Click Save to apply the changes.

You will see a success message if MFA has been enabled correctly.

Other methods

At this time, email is the only supported MFA method. Support for phone (SMS) and authenticator apps (TOTP) is planned for a future release.

Signing in with MFA

Once MFA is enabled, all users are required to verify their identity using a one-time code sent to their registered email address.

To sign in with MFA enabled:

1. Enter your Username and Password as usual.
2. Click Sign in.
   You will be prompted to check your registered email address for a one-time verification code.

3. Access the email associated with your account.
4. Copy the code from the email.
5. Paste it into the Code field.
6. Click Sign in.

Note

It’s recommended to complete the sign-in within 3 minutes, as the verification code will expire soon. If you run into any issues, please try signing in again and a new verification code will be sent to you.

Disabling MFA

To disable MFA:

1. Navigate to the Admin Console. 
2. Go to the Security Center.
3. Click On next to Multi-Factor Authentication.
4. Set Require Multi-factor authentication to No.

5. Click Save to apply the changes. 

Once MFA is disabled, users will no longer be prompted for an additional verification code at sign in.

Overriding MFA

If you need to exempt a specific user from MFA, you can override the organisation-level setting at the individual user level.

To override the MFA setting per-user:

1. Navigate to the Admin Console. 
2. Go to User Management.
3. Locate the user you want to manage.
4. Open the Actions menu. 
5. Select MFA Settings.

6. Set Require Multi-factor authentication to No to turn off MFA for the user only.
7. Click Save to apply the changes.

Once Email MFA is disabled for a user, all other users in the organisation will still be asked for an additional verification code when signing in. However, the user for whom MFA has been disabled will no longer be prompted for this extra verification.

Note

Per-user MFA overrides should be used with caution. Disabling MFA for individual users reduces the security coverage of your organisation.