Appearance

Two-Factor Authentication (2FA) ​

NOTES

  • Two-Factor Authentication provides an additional layer of security for user accounts.
  • When enabled for a company, all company users are required to enter a one-time password generated by an authenticator application after signing in. If 2FA is not enabled, users can sign in using just their email and password.

Enabling 2FA ​

2FA is enabled at the company level in the Company Edit form. Once enabled, all users in the company are required to configure 2FA at their next login. Until this setup is completed, they cannot access the system.

WARNING

When 2FA is enabled, interactive users cannot authenticate using scripts or the API. Use a Service Account for non-interactive access instead. For more information, see Service Accounts.

2FA

Logging in with 2FA ​

To use 2FA, install one of the following authenticator applications on your mobile device:

When logging in for the first time after 2FA is enabled, enter your email and password as usual. You will then be prompted to set up 2FA — scan the QR code on the screen with your authenticator app, or enter the setup key manually.

2FA app

After setup, your authenticator app will generate a one-time 6-digit code. On subsequent logins, after entering your email and password, you will be prompted to enter this code to complete the sign-in.