How to Turn on Two-Step Verification

Two-Step Verification helps protect your account by adding an extra layer of security. Besides the Password, the user will need to type in extra security information. Usually, it is a code generated by a third-party tool, like Google Authenticator, Microsoft Authenticator, or Amazon MFA (Multi-Factor Authentication).

This article covers two fundamental points: Turning on and using Two-Step Verification in Triofox.

How to Turn on Two-Step Verification?

The Cluster admin needs to access the Settings, and click on the 2-Step Verification (MFA)

On the 2-Step Verification (MFA) page, enable the switch.

Setting up in the Authenticator app.

Step 1: Launch the Authenticator app, enter the secret key, or scan the QR code.

Step 2: Enter the code the Authenticator gives.

Step 3: Enter your backup email address and click Next

On the next page, select the options for enforcing 2-Step Authentication and click Apply.

2-Step Authentication is now enabled

How does the user enable Two-Step Verification?

When Two-Step Verification has been enabled, but it is not forced for the User, once the user logs into the web portal session, the user can enable it.

• Log in to the web portal as a User
• Go to the User's Menu at the top right and select 2-Step Verification
  
  
  

• Once enabled, follow the steps below:

  Step 1: Do this from the Authenticator App. Use your app to scan the barcode, or use the secret key

  Step 2: Verify the Security Code. Enter the security code from the authenticator

  Step 3: Backup Email. Specify the backup email that will be used when the authenticator doesn't work or is not available

  Step 4: Enable (if desired) Two-Step Verification for Desktop Clients or Mobile Applications
  
  
  
  

How to Use Two-Step Verification?

When Two-Step Verification has been enabled by the User, after the user enters the password to authenticate, the system will ask for the Security Code.

When Two-Step Verification has been forced by the Admin, and the user hasn't configured it from their side, the Two-Step Verification configuration will be prompted (shown above) when the user logs into the web portal. If an Authenticator has not been configured by the user, they can gain access by clicking 'send' to have a code sent to their email