MFA Token Logon

Multi-factor authentication (MFA) or Two-factor authentication (2FA) is an electronic authentication method in which a user is granted access to PANTHEON only after successfully presenting more pieces of evidence (or factors) to an authentication mechanism.

In this chapter, we will present a use case on how to successfully set up MFA and log in to PANTHEON with MFA Token. 

Case summary The administrator wants to set a Multi-factor authentication for all users in PANTHEON. After the authentication, the user logs in PANTHEON using MFA token. They do this by following these steps. Step title Step title

1. Enabling MFA

The person responsible opens the Administration panel by selecting  Settings | Program | Administration Panel from the menu. They open Settings | Company panel.

They enable the MFA by setting the vaildity of MFA Token in the MFA Token valid hours field. In our case they set validity to one (1) hour.

Next they set the length of the token, in our case 4, in the Token lenght field.

Hint The default value in MFA Token valid hours field is -1, which means that MFA is disabled. To enable it enter the number greater than 0. For more information, see chapter General.

They continue by setting phone numbers for MFA Token for users.

2. Setting up phone number for MFA Token

They open the Subjects register by selecting Subjects | Subjects from the menu and find their company, in our case Tecta Plc.

Pantheon user needs to enter his phone number where he will receive MFA Token at logon. This settings is located at contacts settings, Type of number MFA SMS Authentication.

If phone number is not inserted and MFA logon is enabled, login is not possible.

At PANTHEON login user's phone number is displayed as it is stored in user's settings.

- button must be used in order to send Token to phone number.

User then receives MFA Token SMS and inserts it at login.

Anytime it is possible to request new token and SMS will be sent to user's phone number.

If number was not inserted at contact's settings, then login is not possible.

Case summary Short description of a problem that we are going to explain in below. Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Step title Step title