Two-factor authentication

The Two-factor authentication functionality provides enhanced security when logging in by requiring the user to authenticate with two-step verification. Every time the user logs in, an additional code is generated and sent to them, which they should enter.

This functionality can be enabled at  Settings -> System settings -> Enterprise functions -> Two-factor authentication (2FA).

If this function is enabled:

• It is possible to require 2-step verification when signing in (configured per user).
• Users must use their smartphones to generate and enter a special sign-in code.

Please do not try to switch that on without understanding how it works.

Enabling two-factor authentication (2FA) for logging in

1. Enable it at Settings -> System settings -> Enterprise functions -> Two-factor authentication (2FA).
2. Install an authenticator app on the user’s phone, such as Google Authenticator, Microsoft Authenticator, or another app that supports scanning a QR code and displaying one-time codes.
3. Go to Settings -> Human Resources and open the user's details page.
4. Enable Two-factor authentication (2FA) for the user and save changes.
5. Click the link to show the 2FA key.
6. Open the Google Authenticator app.
7. Click Begin Setup or +.
8. Click Scan barcode, then scan the QR code displayed.
   or click Manual entry.
9. Enter the key to the field Key.
10. The account can be your MRPeasy username.
11. Time-based must be turned on.

If the 2FA box is checked for a particular user, the software will ask them to enter the authentication code once every seven days upon login. The user should:

1. Open the authenticator app on their phone.
2. Enter the code that is generated by the app.