The purpose of this article is to provide direction to enabling Multi-Factor Authentication (MFA) in Fullcast. MFA is an authentication method that requires a user to provide two or more verification factors to obtain access to a resource. MFA strengthens the user verification process and enhances the protection of user data.
The authentication methods are:
Google Authenticator: Google Authenticator is an app that you can download to your phone, providing you with unique authentication options such as a QR code.
Email Authentication: Authentication is done through a registered email.
Information:
Only tenant admins have authorization to resent authentication. By default, the authentication field for the user is set to NA.
Enable Multi-Factor Authentication in Fullcast
Access your Fullcast instance and switch plans if applicable.
Click your profile avatar on the top right corner and select Reset MFA.
Figure 1. Avatar Menu
Alternatively, you can enable MFA when creating a new user, or by editing an existing user.
Figure 2. Enable MFA During User Creation
Figure 3. Enable MFA by Editing a User
Authentication Scenarios
Depending on the MFA settings provided in the User settings and the Tenant Settings, there could be four scenarios in authentication.
User MFA | Tenant MFA | Passcode |
NA | Enabled | Required |
Enabled | Enabled | Required |
Disaled | Enabled | Not Required |
Disabled | Disabled | Not Required |
Authenticate using Google Authenticator
When a user’s MFA is activated for the first time, the user must follow these steps:
Enter the username and password.
Click Try another method.
Select Google Authenticator.
Scan the QR code with your preferred authenticator app and enter the passcode generated in your phone.
Once you press continue, you are authenticated and you can access the application.
Figure 4. Authenticate using Google Authenticator
Authentication Passcode
From this point onwards, whenever you attempt to log in, you will be asked to enter a passcode which you can find in your authenticator application.
Information:
If you check the “Remember this device for 30 days” box, you won’t need to enter your passcode for the next 30 days. This option is only visible if the Tenant Admin has enabled the “Remember browser” setting for your organization.
Authenticate through Registered Email
You can also authenticate your identity using your registered email ID. Click Try another method and select email for verification. Selecting email will send a verification code to your registered email address. After entering the code, click continue.
Figure 5. Authenticate through Registered Email
Your verification is completed giving you access to the Fullcast application.