When your policy requires users to have a more secure login experience, EmpowerID's multi-factor authentication (MFA) model gives you multiple options for applying MFA to people. Depending on your policy, you can require users to perform MFA against a wide variety of various MFA Types or simply allow users to decide for themselves whether they want to protect their accounts with MFA.
| Info |
|---|
If the Password Manager Policy assigned to users has one or more required MFA Types assigned to it, users must use those types in addition to their regular logon methods. Setting an MFA Type directly on a person only has effect when that MFA Type is not required on their Password Manager Policy. |
...
Procedure
Navigate to the View or View One page for the person
...
you want to require multi-factor authentication. EmpowerID provides two main ways to do this. You can navigate to the page by searching for the person using the Global search bar at the top of the page (quickest), or you can navigate to the page by searching for the person using the Find Person page.
...
| Easy html macro |
|---|
| theme | {"label":"solarized_dark","value":"solarized_dark"} |
|---|
| contentByMode | {"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n<style>\r\n .accordion-button.collapsed{\r\n background: ghostwhite;\r\n }\r\n</style>\r\n<div class =\"bd-example\">\r\n<div class=\"accordion\" id=\"accordionExample\">\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingOne\">\r\n <button class=\"accordion-button\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseOne\" aria-expanded=\"true\" aria-controls=\"collapseOne\">\r\n Search Using the Global Search Bar\r\n </button>\r\n </h2>\r\n <div id=\"collapseOne\" class=\"accordion-collapse collapse show\" aria-labelledby=\"headingOne\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <ol>\r\n <li>Select <b>Person</b> as the object filter and then enter the name of the\r\n person.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/personsearchfilter.png\" style=\"padding: 10px;max-height: 300px\"/></p>\r\n <li>Click the card for the person</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/personsearchfilter_clickpersoncard.png\" style=\"padding: 10px;max-height: 300px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingTwo\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseTwo\" aria-expanded=\"false\" aria-controls=\"collapseTwo\">\r\n Search Using the Find Person Page\r\n </button>\r\n </h2>\r\n <div id=\"collapseTwo\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingTwo\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <ol>\r\n <li>On the navbar, expand <b>Identity Administration</b>\r\n and select <b>People</b>.</li>\r\n <p>This directs you to the Find Person page</p>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/findpersonpage.png\" style=\"padding: 10px;max-height: 300px\"/></p>\r\n <li>Search for the person and then click the <b>EmpowerID Login</b> link\r\n for the person.\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/personfindpageloginlink.png\" style=\"padding: 10px;max-height: 300px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n </div>\r\n </div>\r\n ","javascript":"","css":""} |
|---|
|
|
Expand the Multifactor Authentication accordion on the View or View One page and then click the Add (+) button in the grid.
...
Image AddedIn the dialog
...
, select the desired MFA Type from the Type drop-down, specify the Priority, and then click Save.
...
Image Added
Once EmpowerID processes the request, you should see a record for the MFA Type in the grid. As
...
the record indicates, the selected MFA Type is now required for the person. The user must complete the additional factor
...
before access is granted.
...
Image Added| Insert excerpt |
|---|
| IL:External Stylesheet |
|---|
| IL:External Stylesheet |
|---|
| nopanel | true |
|---|
|