Introduction
Multifactor authentication is a method of verifying a user's authenticity in more than one way. By combining multiple factors, security in access control can be tightened to be even more secure. In this article, we explain how to work with two-factor authentication.
What is two-factor authentication?
How do I activate two-factor authentication?
Help, I can't log in with 2FA anymore!
1 What is two-factor authentication
Two-factor authentication is a way of logging in where, in addition to a username and password, the user's identity is verified in a second way. This greatly reduces the risk of login data getting into the wrong hands. Especially for companies working with sensitive information, this can be a prerequisite for security certification.
Two-factor authentication
2 How do I activate two-factor authentication?
By the administrator
The administrator can mandate the use of 2FA for the entire organisation. This means that all users must enter a PIN from the Google Authenticator app in addition to their password when logging in. In addition, the administrator specifies how long the login through the PIN is valid. By default, it is set to 1 hour. This means that a user does not have to enter a new 2FA pincode if he logs into Tribe again for 1 hour. After this hour, a new PIN must be entered when logging in. The administrator can set the expiry period for the entire organisation.
Navigate to configuration
Click on security settings in the menu
By the user
If the administrator has not set a requirement for 2FA, the user can still do this himself. It is not possible for a user to disable 2FA if the administrator has made it mandatory.
Open Tribe CRM and click the image of yourself or your initials in the blue bar
Click on Two-factor authentication.
Two-factor authentication step 2 in Tribe CRM
Slide Two-Factor authentication enabled to the right.
Two-factor authentication step 3 in Tribe CRM
For two-factor authentication, the Google Authenticator app needs to be downloaded. This is indicated in the following screen.
Two-factor authentication step 4 in Tribe CRM
After downloading, open the app and click Get started.
Two-factor authentication step 5 in Tribe CRM
Click on Scan QR code and scan the QR code from point 5.
Two-factor authentication step 6 in Tribe CRM
The Google authenticator app generates a new code every 30 seconds. When two-factor authentication is enabled, it is necessary to enter a code after logging in with your username and password. Take this from the Google authenticator app.
Two-factor authentication step 7 in Tribe CRM
3 Help, I can no longer log in with 2FA!
It may happen that a user can no longer log in with 2FA, for example when using a new phone. Through the Google authenticator app, a new account will have to be created for Tribe CRM. Is this the case with you? Your administrator can help with this by disabling 2FA once for your user. You can then log back into Tribe CRM with your username and password. Before being redirected to the application, you need to scan a QR code again to create the account in Google authenticator.
Steps for the administrator:
Navigate to configuration.
In the menu, click on collaborators.
In the overview, click the disable button. 2FA will now be disabled for the user to take the necessary steps. As soon as the QR code is scanned, 2FA will be enabled again.
The above steps can also be followed if the user has closed the QR code screen before scanning it.