Introduction
Two-Factor Authentication (2FA) is a security feature integrated into the Entire OnHire staff portal, providing extra security to prevent unauthorized access to your account. It adds an additional layer of security beyond a password, using methods such as email address, security questions, and an authenticator app (SMS).
How does Two-Factor Authentication (2FA) work?
Here's how the Two-Factor Authentication works:
- The user enters a username and password to log in to the Entire OnHire staff portal.
- The site prompts the user for a second verification step, which can include a verification code sent via email or SMS, or answering security questions.
- After providing both authentication factors, the user is granted access to the staff portal.
How can the Admin enable Two-Factor Authentication (2FA)?
Two-Factor Authentication settings can be configured by the admin as follows:
1. Go to Masters ? Main Masters ? Two-Factor Authentication.2. Under 2FA Settings, following could be done -
- Enable/disable the 2FA by ticking/ unticking the checkbox.
- Select preferred Default validation mode for the users who sign in for the first time after the activation of 2FA on their accounts.
- Select the desired Email template through which security code will be sent.
- Enter preferred number of days for which the 2FA will remain active. Once this allotted period has expired, the user will be required to verify again either through security code or security questions.
-
new security questions can be added, or,
-
the existing ones can be edited or deleted, or,
-
any of the existing questions can also be disabled by setting their status as INACTIVE.
Any of the security questions which are already in use cannot be edited. Although such questions can be deleted, it’s highly recommended not to reset any of the security questions-in-use unless avoidable - A user can update 2FA settings as follows:
- Go to Two-Factor Authentication Settings under the top-right menu.
2. The user can do the following on this window -
-
choose any of the default authentication methods,
-
Authenticator app (SMS)
-
Email
-
Security questions
-
-
enter the mobile number to receive SMS for security code,
-
choose any two security questions from the drop-down and fill answers for each of them, and,
-
Save the settings.