Administrator: Managing Multi-Factor Authentication (MFA)

Follow

Multi-Factor Authentication or 2-step verification makes your Planning Maestro account more secure by requiring you to authenticate your identity in two ways:

1.Your username and password.

M1a.png

2. A code generated by a Time-based One-Time Password (TOTP) app on your phone or other device.

mceclip0.png

This document shows you, a Planning Maestro Administrator, how to require and stop requiring Multi-Factor Authentication for your company’s Planning Maestro users.

Info.png Please Note: To require MFA only for your account and not for all users, see Using Multi-Factor Authentication.

Requiring Multi-Factor Authentication

Step 1: In your Planning Maestro account, click on the Administration icon ( Profile.png ) in the top right and select Settings.

Info.png Please Note: To require MFA only for your account and not for all users, see Using Multi-Factor Authentication. These steps will require all Planning Maestro users in your company to turn on MFA in their accounts.

R1a.png

Step 2: On the Authentication page, click on the Require MFA toggle switch to turn it to the ON position.

E1b.png

Step 3: A confirmation message appears. Click Yes, Require MFA.

E1c.png

Step 4: An MFA prompt frequency section appears below. Determine when you want users to have to enter a code generated by a Time-based One-time Password (TOTP) app when they log into Planning Maestro:

E1d.png

  • Every login – Select this radio button to require users to enter a code every time they log into Planning Maestro.
  • After ___ number of logins – Select this radio button and enter a number in the field provided to determine how often users have to enter a code.

Example.png Example: To require users to enter a code after every 3 times they log in, select this option and enter 3 in the field provided.

Step 5: Click Save & Exit.

E1e.png

Disabling MFA for One User

Occasionally, you may want to lift the MFA requirement for one user or all users. You can:

  • Disable MFA for one user.
  • Remove the MFA requirement for all users (which makes it optional).

Step 1: To disable MFA for one user, click on the Administration icon (  Administrator.png ) and select Users.

U1a.png

Step 2: On the Users page, next to the user for whom you want to disable MFA, click the Edit icon ( Edit.png ).

Info.png Please Note: If you do not see this toggle switch on the page, the user most likely has not enabled MFA for their account yet. The toggle switch appears after the user enables MFA for their account.

U1b.png

Step 4: A confirmation message appears. Click Yes, Disable MFA.

U1d.png

Step 5: The MFA option disappears from the page. Click Save.

U1e.png

  • A confirmation message appears.

U1f.png

  • Multi-Factor Authentication is disabled for this user’s account. They do not have to use a TOTP app or enter a temporary password to log into Planning Maestro.

Warning.png Please Note: If you disable MFA for this user, you cannot re-enable it for them. The user must re-enable it for themselves through their own user account.

Removing the MFA Requirement for all Users

Occasionally, you may want to remove the requirement for MFA for all accounts and let individual users decide to enable it or not. You can:

  • Disable Multi-Factor Authentication for one user (see the previous section).
  • Remove the Multi-Factor Authentication requirement for all users (which makes it optional).

Step 1: To remove the MFA requirement for all users, click on the Administration icon ( Administrator.png ) and select Authentication.

E1a.png

Step 2: On the Authentication page, click on the Require MFA toggle switch to turn it to the OFF position.

E1b.png

Step 3: A confirmation message appears. Click Yes, Stop Requiring MFA.

A1b.png

Step 4: The MFA-related text on the page disappears. Click Save & Exit.

mceclip0.png

  • A confirmation message appears.
  • MFA is no longer required for all users in your company’s account. Users will still have MFA enabled in their accounts, but they can now disable it if they want to.

U1f.png

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.