Multi Factor Authentication
Multi Factor Authentication, or MFA, adds an extra layer of security to our log in for iKnow. Once we have entered our username and password, we have the option to be sent an email, or to use the Google Authenticator app, to confirm that we are logging in legitimately.
If MFA is switched on for our site, the first time we log in, we will receive an email with a code, which we will need to enter to confirm our details.
Once logged in, we can choose to continue using email, to use Google Authenticator, or have both activated. If we have both activated, the system will default to use Google Authenticator, but we will be able to choose to Use Email instead.
Individual MFA Setup
To make our choice, we will need to click the dropdown at the top right of the page, and click our name.
We’ll then need to click the Multi Factor Authentication button, on the right of the page.
Once we’ve entered our password, we’ll see a window where we can choose which MFA method we would like to use. We can also generate Recovery Codes, which can be used should we not have access to the Google Authenticator app, or our email. This will generate 16, single use recovery codes, and these can be regenerated if they are all used, or lost. Once we’ve made our selections, click the Save button.
If we choose to use Google Authenticator, we will need to download the Google Authenticator app, from our app store, and then link our iKnow site to the app. Once we’ve done this, the app will generate a random code, which is changed every 30 seconds, that we will need to enter, after entering our log in details.
Administrator MFA Setup
Administrators can set who will be required to use MFA, by going to Settings, and clicking Security. They can then choose, whether they want only users within the Administrator Role to be required to use MFA, or if all users with more than View Only access, to any module, will be required to use it. They will also have the option to turn MFA off completely.
Administrators will also be able to see any successful logins, and any failed attempts to login, to iKnow.