Two Factor Authentication (S)

Engage Process offers Two Factor Authentication for the user passwords. Two Factor Authentication is an extra step during login for each user. He or she will no longer have access with only username and password, but each user will also be required to enter an extra code that is presented in the Authenticator app that they need to install on their phone. Note that the configuration of the Authenticator app only has to be done once and that entering a code can (optionally) be skipped on browsers/devices where the user already entered this during a previous login.

Also note that we only allow two factor authentication using Authenticator Apps. This is the safest method. Other common methods like allowing e-mail login confirmation and even SMS text messages have proven to be sensitive to hacking.

By default two factor authentication is switched off.

You can either enforce it for the whole organization or for particular users.

If you select Enforce Two factor Authentication for the whole organization you will be asked for confirmation because this change will have a big impact on all users:

.

If you select Enforce Two factor Authentication per user and then you open the Users & groups tab you will notice that there is en extra column Two Factor Authentication Status added to the users/groups overview. By default all users will have status Disabled.

Select one or more users and press the Enable/Disable Two Factor Authentication button on the right.

The following dialog appears:

Depending on the status of the selected users one or none of the radio buttons will be selected. Press the one corresponding to the status you want to apply to all selected users and press OK.

If you decide to enable Two Factor Authentication for the users you will be asked for confirmation:

Notice that if you disable Two Factor Authentication then the user's statuses are not cleared. So, if you enable it again the old settings will apply.