Multi-Factor Authentication
If enabled at organization level, all users associated with the organization must enable Multi-factor Authentication (MFA). If disabled, users can choose whether or not to enable MFA for their sign-in. By default, MFA is disabled.
Multi-factor authentication (MFA) adds another layer of security to your account. If enabled, instead of relying only on a username and password, MFA uses a trusted device to generate a secure digital identifer used to confirm your identity.
| If signing in with Google or GitHub, set MFA for those accounts and not for your Cloud account. |
Enable Multi-Factor Authentication
If you have not set a password, you must do this before you can enable MFA. To set a password, complete the following steps:
-
Select Account from the side navigation bar
-
Select Password from the Account options
The Account Settings screen displays.
-
Select the RESET button
An email is sent to the registered email address.
-
Select the RESET YOUR PASSWORD link provided in the email
The Cloud Reset Password screen displays.
-
Enter the password you want to use in the New Password text box
-
Enter the same password in the Confirm Password text box
-
Select the Reset Password button
You must log back in to Cloud using this password before you can continue.
To enable MFA, complete the following steps:
-
Install an authenticator app, such as Google Authenticator, on your device
-
Sign into the Cloud console
-
Select Account from the side navigation bar
-
Select Ogranization from the Account options
The Organization screen displays.
-
Select the Enable MFA toggle
-
Open the authenticator app on your device, and scan the QR code that is displayed in the Cloud console
-
Enter the six-digit verification code provided by the authenticator app in the Cloud console
-
To enforce the use of MFA for all organization users, select the Enforce for entire team toggle
You and your organization users must now enter a username and password to sign in, and then provide the verification code using the authenticator app.
Change Authenticator Device
Verification codes are specific to a particular device and cannot be transferred. If you use a different device, you cannot use the codes even if they are generated from the same authentication app.
To change the device used by your authentication app, complete the following steps:
-
Disable MFA on your old device
-
Enable MFA on your new device
You can now use your authenticator app on your new device.
Disable Multi-Factor Authentication
If you’ve enabled MFA, you can disable it at any time to allow you and your organization users to sign in without an extra authentication step.
To disable MFA for all users associated with your organization, complete the following steps:
-
Sign into the Cloud console
-
Select Account from the side navigation bar
-
Select Organization from the Account options
-
Deselect the Enable MFA toggle
A confirmation email is sent to the registered email address to confirm that MFA has been disabled.
