If you want to use MFA for your organisation, you would have to click the settings cog in your top right and go to Security Settings.
Then you have to go to the Multi Factor Authentication Tab (MFA) and turn this on.
We have implemented the MFA for both internal and external users.
When you enable MFA, there is option for you to set the browser profile and you can choose which users needs MFA to login to the system (Organisation user/clients/contractors). You can also multi-select the options based on who you want to login with MFA.
After choosing your options as you wish and click "Save", MFA will get enabled for the users you have switched on.
After enabling MFA, when the user logs in, it will ask them to scan the QR code like below
You/Your users would have to scan the QR code in any of the authenticator apps such as Microsoft/Google authenticator and enter the code displayed in that app. After entering the code and click "Setup", it will log you in if you entered the code correctly. If you registered successfully, when you login next time, it will ask you the authentication code alone while logging in.
If you set remember browser profile for x number of days, it will ask you to scan the QR code once when you login for the first time after enabling MFA. After that, if you login with the same browser profile for set number of days, it will remember and log you in straight away without the authentication code.
MFA Access:
We also have implemented the new screen for managing the MFA access for users. After you have enabled MFA for your users, all the users will get displayed along with their MFA status under Security Settings -> Multi Factor Authentication -> MFA Access.
It will show the number of users who have got the MFA Access as Yes depends upon your filter in the top (Users Type - Org user / Clients / Contractors).
From this screen, you can bulk select and disable MFA access for users whom you think they doesn't need MFA for logging in to the system. You can disable MFA for individual user as well.
Also, if they need re-setting their MFA (due to change of mobile phone (or) any other reason), you can click "Reset" icon (pink coloured icon) to reset it, so that when they login next time, they can see the QR code and set the MFA again in their new device.
We hope that you like this feature and use it for enhanced security🤩😍😎