Keeping your company's information secure starts with protecting individual accounts.
Multi-factor authentication (MFA) adds an extra layer of security by requiring users to verify their identity with both a password and a code from an authentication app.
Even if a password is compromised, MFA helps prevent unauthorized access—giving your company stronger protection against threats like phishing attacks and credential theft.
Using MFA is a simple step that makes a big impact on your overall security posture.
How MFA Works
Admins can turn on MFA at the company level. Once enabled, all users will be prompted to complete enrollment at their next login.
Here's how the process works:
1. Admins: Enable MFA
Go to Company Settings.
Click Edit in the upper right of the Company Settings screen.
Toggle Require Multi-Factor Authentication to ON (see 1 in image below).
Click Save in the upper right (see 2 in image below).
2. Users: Enroll in MFA
At their next login:
Users will be prompted to set up MFA.
They will scan a QR code using an authentication app (like Authy, Google Authenticator (Android or iOS), Duo, LastPass, Microsoft Authenticator, or 1Password).
They’ll enter a verification code from the app to complete enrollment following the on-screen instructions.
3. Users: Verify at Login
After enrollment, users will enter a code from their authenticator app each time they log in.
Users can check "Remember this device for 30 days" to reduce how often they need to verify.
FAQs
Q: What authentication apps are supported?
A: Any app that supports time-based one-time passwords (TOTP), like Authy, Google Authenticator (Android or iOS), Duo, LastPass, Microsoft Authenticator, or 1Password.
Q: Can MFA be turned off later?
A: Yes, company admins can disable the MFA requirement anytime in Company Settings.
Q: What if a user loses their authenticator app?
A: Contact Siteline Support for additional assistance.