For BriteAuth documentation see this page: Set up multi-factor authentication using an authenticator app
Limitations
Standard multi-factor authentication (MFA) is only available for staff, not agents.
MFA is set up by the user in the Security tab of the Contacts module.
Prerequisites
The ability to set up MFA is controlled by the Allow users to enable Multi-factor Authentication. setting and the mfa-enabled advanced setting.
To enable MFA, complete one of the following:
- Go to Settings > System Wide > Login Information. In the Password Strength section, check the Allow users to enable Multi-factor Authentication. checkbox.
- Go to Settings > Advanced and search for mfa-enabled. Set the mfa-enabled advanced setting to True.
The mfa-enabled advanced setting and the Allow users to enable Multi-factor Authentication. checkbox are directly related. If you set the mfa-enabled advanced setting to True, BriteCore automatically selects the Allow users to enable Multi-factor Authentication. checkbox. If you uncheck the Allow users to enable Multi-factor Authentication. checkbox, BriteCore automatically sets the mfa-enabled advanced setting to False.
Set up multi-factor authentication
To set up MFA, open the Security tab and:
- Set the Multi-factor Authentication toggle button to On.
- Navigate to Authentication apps.
- Download and install one of the linked authenticator apps on your phone.
- Return to the Security tab of the Contacts module. Navigate to the BriteCore Key section. You will see BriteCore Secret Key, with a string of letters and numbers directly below, and a QR code.
- Manually enter the secret key in your phone or scan the QR code on your phone.
Usage consideration
When you get a new phone, you may need to get new credentials for MFA. Navigate to Get New Credentials and select Generate New Credentials. Follow the steps outlined in Set up multi-factor authentication.