How to Enable and Set Up Multi Factor Authentication for a Team Member

Users with Administrator permissions have the ability to enable Multi Factor Authentication (MFA) for team members within the Team Member settings. 

When enabled, this setting requires the team member to verify their identity multiple times before they are logged in to Sensei Cloud. In addition to entering their login credentials as usual, they are also required to enter a six-digit verification code received via an authenticator app or text message.

Note: If your organization already uses an alternative MFA method when logging into Sensei Cloud, do not enable this setting.

Team Member Setting

To enable Multi Factor Authentication for a user:

1. From the Administration tab, select Team > Team Member Settings. The Team Member Settings are displayed.
2. Select a team member from the list.
3. Under Actions, click Edit Selected Team Member.
   Note: You can also enable MFA when creating a new team member.
4. Scroll to the Login Information section.
5. Next to the Multi Factor Authentication setting, select Requires MFA.
6. Click Save Team Member. A message is displayed, warning you that enabling MFA for the user causes them to be logged out of any current sessions.
7. Click Yes to proceed and save the setting change.
   Note: If the team member is currently logged in, they are logged out automatically and they receive a message warning them that their account now requires MFA to access Sensei Cloud, and they need to complete the MFA setup process to log back in. 

Setting Up Multi Factor Authentication Methods

After the Requires MFA setting has been enabled, the team member has to finish setting up MFA, beginning with setting up the authenticator app upon their next login (i.e., the log-in session directly after the team member setting is enabled).

Authenticator App Verification 

To set up the Authenticator App verification method:

1. Open the Sensei Cloud website and enter your login information as usual. The Getting Started instructions are displayed.
   
2. Download the authenticator app from the appropriate app store for your device.
3. Using the authenticator app, create a new account by clicking the Plus + icon, and select work account.
4. Select Scan a QR code, and then scan the QR code. A six-digit verification code is provided to you.
5. From the Getting Started window, click Continue. 
6. Enter the six-digit code, and then click Verify. If the code is entered correctly, you are logged in to Sensei Cloud.
   
   Note: The verification codes expire every 30 seconds, but you can retrieve a new one from the authenticator app.

Text Message Verification 

There is another aspect to setting up MFA which occurs when the team member is logging into Sensei Cloud for the second time (after the MFA setting has been enabled). This part of the MFA set up allows the team member to set up text message verification. 

To set up text message verification:

1. Open the Sensei Cloud website and enter your login information as usual. The verification code window is displayed.
2. Enter the verification code from the authenticator app, and then click Verify. A window is displayed prompting you to enter a phone number for additional verification.
   
3. Enter a phone number, and then click Send verification code. A verification code is sent to the phone number via text message.
4. Enter the verification code that was received in the text message, and then click Verify code. If the code is entered correctly, you are logged in to Sensei Cloud.
   

Note: When the initial MFA set up is complete, the team member can use either verification method (authenticator app or text message) moving forward.