You can enable multi-factor authentication (MFA) or two-factor authentication (2FA) for your Bynder users. This provides an extra security layer to the login process of portals that do not make use of single sign-on (SSO).
Users with MFA enabled need to enter an additional security code besides their regular email and password. This security code is generated by an authenticator app on another device, usually a smartphone.
All MFA apps that support TOTP (Time-based One-Time Passwords) can be used.
The MFA will work only with the email and password login. Users who log in with SSO won't be prompted to enter the MFA code.
Once MFA is enabled in your portal your users can begin to log in, see here on how to log in via MFA.
How to Enable MFA for All or Specific User Profiles
Note: Certain portals are configured to have an additional permission called Manage own user profile. If this is the case in your portal, this permission will also need to be enabled for MFA profiles. Otherwise, the user will not be able to configure their MFA.
-
Navigate to to
Settings > Users & rights > Permission Management.
-
Select the user profile for which you want to enable 2FA.
-
In the Users and Permissions section, select the permission Require MFA on login.
-
Select Save.
-
All users in that user profile will have to set up 2FA the next time they try to log in.
-
the users profile will go from the left image to the right confirming the MFA has been enabled.
-
the users profile will go from the left image to the right confirming the MFA has been enabled.
How to Reset MFA for a User
Only users with a permission profile that has the Require MFA on login permission enabled, will need to reconfigure their MFA upon their first login after the MFA reset. Users with a profile for which this permission is not enabled, will not be required to re-enroll for MFA. They can re-enroll manually by going to their account page.
-
Navigate to
-
Search for the user who needs a MFA reset and click the account.
-
Click the Reset button in the Multi-Factor Authentication section. The user can now log in again without using MFA.
-
Click the Save button.
-
Navigate to
-
Select the user profile for which you want to disable 2FA.
-
In the Users and permissions section, deselect the permission Require MFA on login.
-
Click the Save button to save the changes.
To disable MFA for a specific user, MFA needs to be temporarily disabled for that user's profile.
-
Navigate to
-
Search for the user whose MFA needs to be reset.
-
Click on the account and check the user profile.
-
Go to
-
Select the user profile for which MFA temporarily needs to be disabled.
-
In the Users and Permissions section, deselect the permission Require MFA on login and click the Save button at the bottom of the page.
-
Go back to
-
Click the Reset button in the Multi-Factor Authentication section. The status of the MFA will now turn to disabled.
-
Go back to
-
Select the user profile for which MFA was switched off.
-
In the Users and Permissions section, select the permission Require MFA on login and click the Save button at the bottom of the page to save the changes.
Updated