Two-Factor Authentication

Two-factor authentication is available to increase login security. When activated, users are asked to provide additional validation via a code delivered through SMS (text message) or email.

Anyone who has been designated with the Site Admin Security Level is required to authenticate by using the two-factor every day or every time they log in from a new browser or computer.

Enable Two-Factor Authentication

1. Go to User Maintenance from Admin.

2. Choose the User ID.
3. Enter Password.
4. Select Submit.

5. Using the dropdown, enable Two Factor Authentication. All users that are designated as Site Admin, who manage other users, are required to choose Every One Day. For all other users, the frequency selected will determine how often the user will be required to authenticate using a two-factor code. The user will validate when they log in from a different computer or use a different browser.
6. Priority: Choose method to receive the Two Factor Authentication Code, Cell Phone or Email. The Priority selection determines the default of how the two-factor code is delivered to the user.
7. Cell Phone and Email: The Priority method chosen for delivery must be entered, cell phone or email. When both are entered, the delivery method can be overridden when logging in.

• Example: The Cell Phone and Email were entered in User Maintenance, and the Cell Phone was selected for your priority method of delivery.

• If the User did not receive the code on their cell phone, they have the option to send it to their email.

8. Select Save [F2]

Using the Two-Factor Verification

When logging in, Users are presented with a Two-Factor Verification screen indicating that a one-time ID has been sent to their phone or email (depending on the Priority selection on their user profile). Cookies must be enabled. If cookies are cleared from the browser, the system will require the user to authenticate at their next login.

1. Enter the code on the Two Factor Verification screen. Do not include the prefix letters PM.

1. If the User did not receive the code on their cell phone, they have the option to send it to their email or to Resend by Text.

• To receive by email, the email address must be entered in User Maintenance.

2. Select the Remember this computer checkbox so your browser will not require you to authenticate again until the designated time period expires (as selected in the two-factor setup).
3. Select Done.