Two Factor PIN Authentication Required
- Jamie Dottavio (Unlicensed)
Two Factor PIN Authentication Required
Two-factor authentication is a security process in which the CMS user provides two means of identification from separate categories of credentials. When this setting is enabled, a user must provide their login credentials (Username and Password) along with a randomly generated PIN. When accessing the login page, a user can generate a random PIN which will be sent to their email address (Username).
To enable this setting, check the box labeled "Two Factor PIN Authentication Required" and then select the Save button. To disregard any changes made on the Edit Settings page, click the Cancel button.
Include Device Recognition
Enabling two-factor authentication provides the Administrator the option to additionally enable the CMS to 'remember' a user's device so that the two-factor PIN is not required on subsequent sign-on. To enable the 'remember this device' feature, check the checkbox labeled 'Include Device Recognition' as shown below:
When the 'Include Device Recognition' option is enabled, the user will be presented with the following alert once they sign in to the CMS successfully:
If the user selects the 'Ok' button, subsequent sign-on attempts from that device will not require a PIN. Devices are 'remembered' for 60 days, after which the user will again be required to enter a PIN and be prompted to remember the device.
Signing in with Two Factor Authentication
When the two-factor authentication setting is enabled, the user will log in with their username and password, then they will be presented with the following page during sign-in:
If the administrator has enabled the 'Two Factor PIN Authentication Required' setting, the user will be required to enter a PIN along with their credentials to sign into the CMS.
When the two-factor setting is enabled, the user will be sent an email containing the PIN needed to sign into the CMS. An example of an email sent on PIN generation is shown below:
If the 'Include Device Recognition' option is enabled on the Edit Settings page, the user will be presented with the following alert once they sign on to the CMS successfully:
If the user selects the 'Ok' button, subsequent sign-on attempts from that device will not require a PIN. Devices are 'remembered' for 60 days, after which the user will again be required to enter a PIN and be prompted to remember the device.