Multi-factor Authentication (MFA) - Genius CE & Enterprise

Introduction

Many Genius CE & Enterprise users protect their online accounts with Multi-factor Authentication. With Genius CE & Enterprise, administrators and users granted access can configure a Two factor Authentication process. This is a safety measure used to add another layer of security to your database. In this article, we'll share the processes to configure this feature as needed by your organization.

Enabling Multi-factor Authentication (MFA)

To turn on this feature for users, an Administrator or other roles granted access to the "Two Factor Authentication" tab in the Admin menu will locate this in the subsection: Users and Access.

The following screen will appear with a drop-down menu that will provide the user with a list of roles to view or edit. Since this feature can be enabled by role, the user might have to repeat this process for each role.

There are two selections you will need to choose for the role you are setting up Multi Factor Authentication for.

The first selection is Multi Factor Type. The list for the Multi Factor Type field includes:

• Qr Code: this option will require the user to use an app on a secondary device to retrieve a six-digit code to validate their login into the Genius CE or Enterprise instance.
• E-mail: this option will require the user to use a code received in their respective email inbox to validate their login into the Genius CE or Enterprise instance.

The second selection is Multi Factor Requirement, which is only available if you choose “QR Code” as the Multi Factor Type. The list for the Multi Factor Authentication field includes:

• Required: Requires all users in this role to have this feature turned on.
• Optional (turned on/off by individual users): Allows user to decide whether this feature is turned on or off.
• Not available: Does not allow user to turn on this feature.

MFA User Experience through the QR Code Option

If MFA is required, this screen will appear during the log in process for any user role impacted.:

If other roles (Admins, Affiliation Managers, Instructors, etc.) are given the option to turn MFA on or off, they will be able to do so in the top right dropdown of their screen when logged in. The process is then the same as for a Learner.

Please note that this feature can be updated by roles with permission to access the Two Factor Authentication tab at any time and changes will update immediately for whoever is impacted.

 

MFA User Experience through the E-mail option

The following will pop up every time if the E-mail option is being used for a particular user group’s Multi Factor Authentication:

The user should navigate to the email inbox associated with their account to retrieve the code that they need to enter. After they have retrieved the code, the user can click verify and continue logging in to the Genius CE or Enterprise instance.