Two-factor authentication

The Two-factor authentication functionality provides higher security when logging in by requiring the user to authenticate using two-step verification/login. Every time the user logs in, an additional code is generated and sent to them, which they should enter.

This functionality can be enabled at  Settings -> System settings -> Enterprise functions -> Two-factor authentication (2FA).

If this function is enabled:

• It is possible to force users to perform 2-step verification when signing in (configured per user).
• Users must use their smartphones to generate and enter a special sign-in code.

Please do not try to switch that On without understanding how it works.

Enabling two-factor authentication (2FA) for logging in

1. Enable it at Settings -> System settings -> Enterprise functions -> Two-factor authentication (2FA).
2. Install an authenticator app on the user’s phone, such as Google Authenticator, Microsoft Authenticator, or some other that supports scanning a QR code and then showing short-time codes.
3. Go to Settings -> Human Resources and open the user's details page.
4. Enable Two-factor authentication (2FA) for the user and Save changes.
5. Click the link to Show the 2FA key.
6. Open the Google Authenticator app.
7. Click Begin Setup or +.
8. Click Scan barcode and scan a QR-code that is displayed,
   or click Manual entry.
9. Enter the key to field Key.
10. The account can be your MRPeasy username.
11. Time-based must be turned on.

If the 2FA box is checked for a particular user, the software will ask them to enter the authentication code whenever they log in. The user should:

1. Open the authenticator app on their phone.
2. Enter the code that is generated by the app.