Overview
Multi-factor authentication will be available to enable for LO teams. This will prompt a user when logging in via a new device or browser to provide either a code either sent via email or text message depending on the settings enabled for that particular team.
How to Set Up
Company Settings
From the team pipeline, choose the team name in the upper right-hand corner and select the option to navigate to the Company Dashboard:
Navigate to Company Settings and then Basic Settings:
Scroll down to 2-Step Verification and select the option to Edit 2-Step Verification:
Select the option to Enable 2-Step Verification. Select if you'd like to allow LO teams to enable 2-step verification or if you'd prefer to require 2-step verification for LO teams. Select Next to proceed:
Select which company admins will receive an email when a user is locked out of their account. These users will have access to unlock the account if needed. Select Save to confirm your changes:
Setting Up and Using 2-Step Verification
If users have the option to allow 2-step verification in the company settings, they can enable this in their individual team account to start by clicking on the email address in the top right hand corner:
Scroll down to 2-Step Verification and select the option to Edit 2-Step Verification:
Select Get Started to proceed:
Choose the security method (either text message or email). Both can be enabled if preferrable. Select Continue to begin:
Enter your email address or phone number and select Send Code:
A 6-digit code will be sent either via email or text depending on the option that's selected. Enter the code and select Continue to proceed:
Note: You can also resend the code if you didn't receive the email or text, or you can change the email address or phone number if this was entered incorrectly.
You will see that 2-step verification has been enabled for the option you selected. You can proceed to set up the other option if you'd like, or select Continue to proceed:
You will be provide with some recovery codes that you can copy and save in a safe place. These are available so that you can still get back into your account if you are unable to receive an email or text message. Click Finish to complete the setup process:
The next time you log in via a new browser or device, you will be prompted to enter the code that was sent via email or text message and select Log In to proceed:
If the email or text message cannot be recovered, selecting Enter recovery code will allow you to enter your recovery codes instead:
Note: An option to notify the company admin is also available if you cannot receive the email, text message, and don't have your recovery codes.
If the option to set up 2-step verification is required, then the user will be prompted to set this up the first time they log in using a new browser or device via the same process as above.
Locked Out Users
If a user is locked out and cannot receive the email, text message, and doesn't have their recovery codes, they can notify the selected company admin. The company admin will then receive an email prompting them to go in and reset the user's 2-step verification.
From the company dashboard, navigate into the Users tab:
Select the lock icon towards the right of the user's name and email address to reset the 2-step verification:
Select Reset 2-step verification and select Save:
Note: Resetting a user's 2-step verification will prompt them to set it up again on their next login. A reset is valid for 30 days.
Users will also be locked out after 8 incorrect verification code attempts and will see an option to notify the company admin:
The company admin will then receive an email prompting them to go in and reset the user's 2-step verification.
From the company dashboard, navigate into the Users tab:
Select the red lock icon towards the right of the user's name and email address to reset the 2-step verification:
Select Reset 2-step verification and select Save:
Note: Resetting a user's 2-step verification will prompt them to set it up again on their next login. A reset is valid for 30 days.
Please sign in to leave a comment.