Two-factor Authentication (2FA)

Two-factor authentication (2FA), also known as two-step verification or dual-factor authentication, is a security process that requires users to provide two distinct authentication factors to confirm their identity.

In our implementation of 2FA, users must provide two specific authentication factors when they sign in: their email/password combination and a one-time 2FA code generated by their chosen authentication method.

Supported Authentication Methods

Our system supports two authentication methods:

1. Authenticator App

2. Text Message

Administrator Control

Administrators can enable either both authentication methods or select just one based on their preferences and security requirements. 2FA can be set as optional or mandatory for all users.

How to enable 2FA

Navigate to RapIDadmin > Administration > Settings to view the 2 Step Verification settings.

Enroll a device

For step-by-step instructions on enrolling a 2FA device, visit https://vds.atlassian.net/wiki/spaces/EliteID/pages/2000846869.

Troubleshooting

• User Troubleshooting: If you’re a user experiencing issues with 2FA, visit https://vds.atlassian.net/wiki/spaces/EliteID/pages/2001010735/Login+using+2FA#Troubleshooting for user-specific guidance.

• Administrator Troubleshooting: As an administrator, you may need to generate a 2 Step Reset Code for users in the following scenarios:

  • When "Make 2 Step Verification Mandatory" is enabled, and the user hasn’t enrolled a device within the 14-day grace period, and "Allow Self Recovery" is disabled.

  • If a user has lost access to their 2FA device and "Allow Self Recovery" is disabled.

Generate 2 Step Reset Code

1. Navigate to RapIDadmin > Users

2. Select Actions > Generate 2 Step Reset Code

   Open

   

3. A modal window will display the one time recovery code.

4. Click Email to User and Close to send an email containing the code to the user, or click Copy and provide the code to the user by other means.

Open