How to enable MFA and what is it
Introduction
Multi-factor authentication (MFA) is an access control mechanism that requires multiple authentication methods to access a service or application.
MFA adds a layer of protection to the login process. When accessing an application or service, in addition to entering username and password, users must go through additional identity verification such as specifying a code that they receive on their mobile phone or in a password management application.
How does MFA work?
When a user enables a second authentication method to protect their account from unauthorized access, the service or application will require additional verification information during the login process, after entering their username and password.
One of the most common MFA authentication methods is the one-time password (OTP). OTPs are 4-8 digit codes that are received via SMS, email, or authenticator apps.
At Enverus, we care about the security of our customers and that is why our MFA mechanism requires time-based one-time passwords (TOTP). TOTPs are 6-digit codes that the user receives through an authentication application (such as 1Password, Google Authenticator, etc.) and have a useful life of just 30 seconds.
How to enable MFA?
Please follow the next steps to enable MFA authentication process:
1. Enter your Enverus Login credentials (email and password) and click “Sign-In”.
2. Secure your account by choosing one of the three different authentication method.
3. If you choose Phone:
a. If the default country is not correct, click on the arrow to select the appropriate country.
b. Enter phone number with area code in the white box.
c. Select an option for text message or voice call. Default selection is text message.
d. Click “Continue”.
e. Expect the following text message to your cell phone or voice call to your landline.
“###### is your verification code for Enverus. Please enter this code to verify your enrollment.”
f. Verify your identity by entering the 6-digit code received in the white box in the ‘Verify Your Identity’ screen.
g. Click “Continue”.
h. Users will be provided with a one time use recovery code that can be used if the primary phone entered is not available to receive the access code.
Important: Copy this code and keep it in a safe place.
i. Once the code has been stored; check the box “I have safely recorded this code”
j. Click “Continue”.
k. You are now on Enverus homepage, please select RatedPower or any available option to start working.
4.In case you choose Authenticator Apps as authentication method
a.Please download your preferred authenticator App on your mobile device and scan the QR code that will appear.
b.enter the provided one time code that will appear on your authenticator App below.
c. Users will be provided with a one time use recovery code that can be used if the primary phone entered is not available to receive the access code.
Important: Copy this code and keep it in a safe place.
d. Once the code has been stored; check the box “I have safely recorded this code”
e. Click “Continue”.
f. You are now on Enverus homepage, please select RatedPower or any available option to start working.
5.In case you choose Notifications( Autho Guardian App) as authentication method.
a.It will require installing the Aut0 Guardian App from your mobile device.
b.Scan the QR code below using the Auth0 Guardian APP on your mobile device
c. Users will be provided with a one time use recovery code that can be used if the primary phone entered is not available to receive the access code.
Important: Copy this code and keep it in a safe place.
d. Once the code has been stored; check the box “I have safely recorded this code”
e. Click “Continue”.
f. You are now on Enverus homepage, please select RatedPower or any available option to start working.
FAQ
Is there a way to prevent me from entering the SMS code every time I log in?
Click the ‘Remember this device for 30 days’ on the screen that you enter the 6-digit code, so that you will not be prompted to enter the code each time you log in. Important that you only do this if the computer/phone/tablet that you logging in with is your device (not public).
My Enverus Login is used for multiple Enverus products. Will MFA be used for all of them?
Yes, if MFA is set up for your Enverus Login it will be used for any Enverus product that user login has access to.
I have a new phone number. How do I update?
If you do not have access to the previous phone, you must use the recovery code to log in.
Once you are logged in, add an Additional Phone Number to your Profile and Delete a Phone Number from the Profile section to make the appropriate updates.
For any other questions or more information regarding this topic, feel free to contact support@ratedpower.com