Enable, Update, or Disable Multifactor Authentication Methods

Overview

This article guides you through the process of enabling, updating, and disabling Multi-Factor Authentication (MFA) within the B2Gnow Baseline System. MFA enhances account security by requiring additional verification beyond a password, significantly reducing the risk of unauthorized access due to weak or compromised credentials. This article provides step-by-step instructions for setting up MFA using either an email verification code or an authentication application. It also includes details on how to adjust authentication frequency and manage MFA settings for individual users.

Steps

There are two options for multi-factor authentication: receiving an access code via email or utilizing an "authentication app" (such as DUO, Google, Authy, etc.). The following steps for enabling, updating, or disabling MFA are identical for all user types and are detailed as follows:

Enable Multifactor Authentication via Email

1. Click Add Email Method.

Multi-Factor Authentication Management page to activate security by adding email or authentication app methods; select ‘Add Email method’.

2. A modal will appear to inform the user of the next steps. Click Continue to proceed.

Prompt to continue email verification by sending a one-time access code to the user’s email; Select ‘Continue’.

3. A new screen will appear, providing additional details. Click Trigger Email with Access Code to prompt an access code to be sent to the email address associated with the user account.

Activate Multi-Factor Authentication by Email page to trigger an access code email and proceed with account verification; select ‘Trigger Email with Access Code’.

4. Then an email notification will be sent to the user containing an access verification code.

Access Verification Code email providing a one-time code to enter on the confirmation page to complete account verification.

5. Enter the code within 15 minutes and click Submit Code. If it has been over 15 minutes, click the Trigger Another Access Code. To cancel the request, click the Return button.

Activate Multi-Factor Authentication by Email page; enter the access code from email and select ‘Submit code’ to complete verification.

Enable Multifactor Authentication via the Authenticator App

1. Click Add Authentication App Method.

 Multi-Factor Authentication Status section showing inactive status; select ‘Add Authentication App Method’ to enable security.

2. A modal will appear to inform the user of the next steps. Click Continue to proceed.

Activate Multi-Factor Authentication dialog to continue setup using an authentication app for secure access verification; select ‘Continue’.

3. Select Phone or Mobile Device Apps to proceed.

Setup Multi-Factor Authentication page; select ‘Phone or Mobile Device Apps’.mceclip0.png

NOTE: Both phone/mobile device apps and browser extensions are supported by the authenticator app method. The following demonstration will use the phone/mobile device app called Authenticator.

mceclip0.png

4. All Multi-Factor or one-time password (OTP) applications will work for authentication purposes. A list of multi-factor applications may be viewed by clicking the list of Multi-Factor applications here link.

Setup Multi-Factor Phone Authentication Application page with arrow highlighting the link ‘list of Multi-Factor applications here’.

5. Download the applicable application. Click the Close button at the upper right corner of the window to return to the prior screen.

Multi-Factor Authentication Applications dialog listing compatible mobile apps to download for generating secure access codes.

6. Open the Authenticator app on your device and scan the QR code. The Authenticator app will generate a 6-digit access code.

Authenticator app screen displaying a one-time access code to enter during multi-factor authentication setup.

7. Enter the code on the Setup page, click Submit Code.

Setup Multi-Factor Phone Authentication Application page to scan QR code, enter the six-digit app code, and submit to complete setup.

Note: You can activate both methods at the same time.

Multi-Factor Authentication Status section showing active status with email enabled and option to add an authentication app for additional security.

Setting the Multifactor Authentication Frequency

1. After Multifactor Authentication is enabled, the Multi-Factor Authentication Frequency setting will become available.

Multi-Factor Authentication Status section highlighting the ‘Multi-Factor Authentication Frequency’ setting.

2. Choose how often the multi-factor authentication is required, then click Save.

Select the multi-factor authentication frequency and then select ‘Save’. 

3. The Configuration Settings screen will display a green box confirming the frequency has been saved.

Multi-Factor Authentication Management page confirming authentication frequency has been successfully saved for account security.

Update the Active Multifactor Authentication method

1. Update multifactor authentication method by clicking the Clear, or reset link next to the method you want to deactivate. The click the Add link next method you want to activate. 

Multi-Factor Authentication Status section showing active status and options to add or update multi-factor authentication methods; arrows highlight the ‘Add’ link and the ‘clear, reset’ link.

2. Follow the Enable Multifactor Authentication via Email or Enable Multifactor Authentication via the the Authenticator App steps above.

Update the Active Multifactor Authentication Frequency

1. Update the multifactor authentication frequency by clicking the Change link next to the Frequency. 

Multi-Factor Authentication Status section with an arrow highlighting the ‘change’ link to change authentication frequency for account access.

2. Choose the new frequency and click Save

Change Frequency dialog to select how often multi-factor authentication is required and save updated security settings.

3. The Configuration Settings screen will display a green box confirming the frequency has been saved.

Multi-Factor Authentication Management page confirming updated frequency and showing active email method with option to add an authentication app.

Disable the Active Multifactor Authentication method

1. Active multifactor authentication methods and settings may be cleared by clicking the Clear Multi-Factor Authentication button.

2. Confirm you want to clear the setting by entering Your Account Password password, then click Clear Multi-Factor Authentication

Clear Multi-Factor Authentication dialog; enter your account password, and then select ‘Clear Multi-Factor Authentication’ button to confirm.

3. The Configuration Settings screen will display a green box confirming the settings have been cleared.

Configuration Settings screen confirming all authentication methods have been cleared from the account.

Summary

Multi-Factor Authentication (MFA) adds an essential layer of protection to user accounts by requiring two or more verification factors to access the system. In the B2Gnow Baseline System, you can enable MFA through either an email-based access code or an authentication app such as Duo, Google Authenticator, or Authy. This article outlines the full process for:

  • Enabling MFA via email or an authentication app

  • Setting and modifying MFA frequency preferences

  • Updating or changing an existing MFA method

  • Disabling MFA when necessary

These procedures apply to all user types. Organizations seeking to implement MFA across multiple users or user groups should coordinate with the B2Gnow Configuration Team for system-wide setup requirements and considerations.

If you still require additional assistance, close this tab and return back to the system and submit a support ticket.

Related to