Multi-Factor Authentication (MFA) for Firm Users

Multi-factor authentication provides enhanced account security by requiring the user to enter an access code to login. There are also options to add trusted devices or IP addresses so the user does not have to generate a code every time they login. 

Enabling Multi-Factor Authentication

1. Click the Navigation Widget. 
2. Click Suite Settings.
3. Click Security.
4. Navigate to Multifactor Authentication. 
5. Click the Internal Users toggle to ON. 
6. Click on the Settings icon to open a popup window.
7. Click Enable for ALL to quickly turn the setting on for all users.
8. Click the toggles in the Action column to turn MFA on or off for specific users.   

    

MFA Settings by IP Addresses

1. Click Add to update trusted IP addresses.
   • Connecting from a trusted IP satisfies the security requirement and no MFA is required.
2. Check Skip multi-factor authentication for requests from federated users. 
   
   • When enabled, users can opt to remember their device. An access code is only required after the set number of days has passed. 
3. Check Remember Multi-factor Authentication.
   • Set the number of days before a user is required to use MFA to successfully log in again.
4. Click Save.

Using Multi-Factor Authentication

The next time a user logs in, SafeSend will ask them to enter a phone number for verification.

Please note:

The phone number entered must be able to receive SMS text.

1. A code is sent to the user's mobile phone via text message.
2. Enter the code into the code field.
   • If allowed, you may check the option to remember your device.
3. Click Submit to verify the code and login.