Set up two-factor authentication

Set up two-factor authentication

  1. Open 'System' tab in "Manage" screen.
  2. Click 'Set' button under 'Two-factor authentication'.
../../../_images/img_01.en181.png
  1. Set two-factor authentication settings in 'Two-factor authentication settings' dialog.
../../../_images/img_02.en164.png

[1] Two-factor authentication usage settings (initial setting: Do not use)

Set whether to perform two-factor authentication.
Select from "Do not use", "Available", or "Forced use".

[2] Two-factor authentication session lifetime (initial setting: 0 days)

The two-factor authentication session lifetime.
You can specify 0 to 30 days.

Tip

  • If you select 'Available' or 'Forced use' in the two-factor authentication settings, you can specify the two-factor authentication session lifetime.
  • If you specify '0 days' for the two-factor authentication session lifetime, two-factor authentication will be performed each time you log in.

Attention

  • The settings will be reflected immediately after registration, so please inform the users.
  • The settings will be effective for the currently logged-in user from the next login.
  • If 'Do not use' is selected, all settings related to two-factor authentication will be deleted.
  • If you log in with a terminal different from the terminal when the latest two-factor authentication was successful, two-factor authentication will be performed even if it’s within the two-factor authentication session lifetime.
  • Even if you select 'Available' or 'Forced use' in the two-factor authentication settings, two-factor authentication will not be performed in the following cases.
    • offline
    • SAML authentication
    • Integrated Windows authentication
  1. Click 'Register' button.

See also

When 'Available' or 'Forced use' is selected in the two-factor authentication settings, users can enable two-factor authentication and log in using two-factor authentication (password authentication + one-time password authentication).Please refer to Enable two-factor authentication for details on enabling two-factor authentication.

Exclude two-factor authentication

  1. Open 'User management' in "Manage" screen.
  2. Click the 'Edit' button for the target user.
../../../_images/img_03.en132.png
  1. In 'User Registration' dialog, check 'Skip two-factor authentication'.
../../../_images/img_04.en117.png

Tip

You can register a new user excluding two-factor authentication. For user registration, see Register user.

Attention

To exclude two-factor authentication, the system administrator must have set the two-factor authentication settings to 'Available' or 'Forced use'. If 'Do not use' is set, the check box for exclusion will not appear in the dialog.

Disable two-factor authentication for users

  1. Open 'User management' in "Manage" screen.
  2. Click the 'Edit' button for the target user.
../../../_images/img_05.en103.png
  1. In the 'User Registration' dialog, click the 'Disable' button.
../../../_images/img_06.en84.png

Attention

To disable two-factor authentication for a user, the system administrator must have set the two-factor authentication settings to 'Available' or 'Forced use'. If 'Do not use' is set, the two-factor authentication and 'Disable' button will not appear in the dialog.



Important

'System administrator' privileges are required to set up two-factor authentication, exclude two-factor authentication, or disable two-factor authentication for a user.

../../../_images/celf_help_mascot35.png

Related keywords

multi-factor authentication