Enable 2FA for Access

Enable two-step verification for the Administration Panel and, if needed, for the User Portal from the user profile on the platform.

Two-step verification adds a second access factor: after entering the password, you must validate the login with a code generated in an authenticator app, such as Google Authenticator or Microsoft Authenticator.

image

Before you start

Follow these steps before enabling two-step verification:

• Log in to the Platform with an already registered user.
• Install on your smartphone an authenticator app, such as Google Authenticator or Microsoft Authenticator.
• If you also want to enable protection in the User Portal, first deploy a service that uses that portal, such as Remote Desktop or File Storage.

Audience and scope

This guide is intended for administrators who manage users within the platform. The procedure covers enabling the second factor for the Administration Panel and, optionally, for the User Portal.

Step 1. Open the user's profile

1. In the Dashboard initial, open the section Organization (1) from the top menu.
2. In the left side menu, go to Users (2).
3. Locate the user you want to modify, open the context menu "..." and select Edit (3).

image

image

image

Step 2. Enable two-step verification

1. Within the user's record, go to the subsection Profile.
2. Scroll down to the part where the password and two-factor authentication are managed.
3. Enable the checkbox of two-factor authentication (4) for the Administration Panel.
4. Save the changes (5).

image

When you save, the platform will display a confirmation indicating that the change has been applied successfully.

authentication allows you to increase security in the processes of

Step 3. Register the authenticator app

The next time the user logs in, they must have open on their smartphone the app Google Authenticator or Microsoft Authenticator. When they access it, the platform will display a modal window with the data needed to link the account.

image

You can complete the registration in one of these two ways:

1. Alphanumeric key (6.1). Enter the key manually in the authenticator app.
2. QR code (6.2). Scan the QR code from the authenticator app.

image

After registration, the app will start generating verification codes. From that moment on, the user must consult that code every time they want to access the platform.

image

The platform also generates one-time access codes (9). These codes are single-use and serve as a backup if you cannot consult the mobile app at a given moment.

image

What changes after enabling two-factor

Once activation is complete, two additional actions are enabled in the user's profile:

• Generate new key (10) to link the authenticator app again.
• Generate new one-time codes (11) to have new backup codes.

The behavior is the same whether you use Google Authenticator or whether you use Microsoft Authenticator.

image

Security and scope

This configuration adds an additional layer of protection to access because it combines something you know (the password) with something you have (the authenticator app on your mobile phone or a one-time code). If you want to expand the information about security in Plenit, see the section on Infrastructure and Security.