Configure Google Multi-Factor Authentication (MFA)

Configure your device for MFA.

Your Android device must be running Android version 2.1 or later to use Google MFA. Your iPhone, iPod Touch, or iPad must have the latest operating system for your device, and your iPhone must be a 3G model or later in order to set up the app using a QR barcode.

Log in to SaaS Security using your current credentials. Click

Proceed to setup MFA

.



Install

the Google Authenticator app to your mobile device.



Link your mobile device to your account on SaaS Security.

Using
QR Barcode
— Select Barcode
View
. If the authenticator app cannot locate a barcode scanner app on your mobile device, you can download and install one. If you want to install a barcode scanner app so you can complete the setup, select
Install
, and then go through the installation process. After installation, reopen Google Authenticator, and point your camera at the barcode on your computer screen.

Using
Private Key
— Select Private Key
View
and then enter the
private key
on your authenticator app.

On the
Regenerate Key?
screen, click
OK
to receive two consecutive passcodes to sync to the authenticator app.

On SaaS Security, enter the two passcodes and
Save
the setup.

Read and
Accept
the End-User License Agreement (EULA).
To test that the app is working, enter the verification
Code
from your mobile device and then
Verify
. A confirmation message will display if your code is correct.
Save
to exit the setup. If your code is incorrect, try generating a new verification code on your mobile device, and then entering it in your computer.

Configure MFA on SaaS Security.

As a

Super Admin

, you can change the Authentication settings for any account except your own. To change your Authentication settings, another Super Admin must configure your account.

Select

Settings

Authentication

.

Select an

Authentication

method:

Local Authentication
— Grants user access after successfully presenting a passcode pair or QR barcode evidence to the MFA mechanism.
Single Sign-On
— A single sign-onlogin event provides automatic access to multiple authenticated services, and a single logout event automatically ends the session for multiple services.
Save
your selection.



Define the settings for local authentication.

Enter the one-time password (OTP) prompt frequency in
Local Authentication
Do not prompt for OTP
to
0
for all log in attempts, or the number of days from
1
to
7
.
Enter the number of incorrect login attempts allowed in
Block logins after consecutive incorrect passcodes
between
1
and
30
.
Save
your settings.



Administrators will see this authentication message after entering their SaaS Security credentials.