Multi-Factor Authentication

Overview

Multi-Factor Authentication (MFA) adds a second verification step to the login process. StoreFeeder uses one-time passwords (OTP) in conjunction with your chosen authenticator app (such as Google Authenticator, Authy, or Microsoft Authenticator).

Enable MFA for your account

1. Go to Settings > Company > Multi Factor Authentication.

1. Use the toggle to allow users to set up MFA. This does not enforce MFA unless you also set a date in the Mandatory From field.
2. If you enter a date in Mandatory From, all users are required to set up MFA before they can log in, unless an admin has marked them as exempt.

The bottom of the page lists users who have not yet set up MFA on your account.

First-time MFA setup (user experience)

When MFA is active and a user logs in for the first time, they see a setup prompt:

1. Open your authenticator app and scan the QR code shown on screen. The QR code is unique to your login.
2. The app provides a 6-digit code. Enter this code in the Verification Code field and submit.
3. Optionally, check Remember this device for 30 days to avoid re-authenticating from the same device for 30 days.
4. Optionally, add a device name so admins can see permitted devices in the user profile.

On subsequent logins requiring MFA, open your authenticator app and enter the current code.

Manage MFA for users (admin)

Go to Settings > Company > Users and select the relevant user.

From the user profile you can reset a user's MFA, which revokes their current device trust and requires them to complete the setup process again.