Each user has the option to enable two-factor authentication individually, or it can be enforced site-wide, requiring all users to set it up.
Enable 2FA individually
Note: Two-factor authentication can only be set up through a web browser. It must be enforced before it can be configured via the mobile app.
When logged in via a web browser, click on the person icon on the top right-hand side of the page and then click on ‘Settings’.
Towards the bottom of the page there is a ‘Security’ section.
Click on the ‘Two-factor authentication’ button and it will bring you to the ‘Manage two-factor authentication’ page.
Tick the 'Enable two-factor authentication' box and you will see the below options.
The user will need to enter a valid phone number.
The phone will need to have a mobile signal.
A verification code will then be sent to the user’s phone.
The verification code received needs to be entered into the ‘Step Two’ section of the screenshot above.
At this point 2FA will now be set up for that user.
Enforcing 2FA for all site users
Note: Please contact Saeker if you would like 2FA to be enforced for all users on your site.
After entering their email and password at the login page, the user will see a ‘Set Up SMS Authentication’ page
Web
Mobile app
The user will need to enter a valid phone number.
The phone will need to have a mobile signal.
A verification code will then be sent to the user’s phone.
The verification code received needs to be entered into the ‘Step Two’ section of the screenshots above.
At this point 2FA will now be set up for that user.
The token will remain valid for 15 days, so as long as the user does not log out of the system, they will not need to go through the 2FA verification process every time they use the system. They will need to go through the process every 15 days after the last login.
This is how it looks after 2FA has been set up and the user attempts to login again
Web
Mobile app
Once 2FA has been set up, there are two ways to get a verification code without a mobile phone.
1) Recovery Codes
When logged in via a web browser, click on the person icon on the top right-hand side of the page and then click on ‘Settings’.
Towards the bottom of the page there is a ‘Security’ section.
Click on the ‘Two-factor authentication’ button and it will bring you to the ‘Manage two-factor authentication’ page.
From here you can download your recovery codes. They can be used if you can’t access your mobile phone. You will receive 10 recovery codes; each code can only be used once.
The second way to get a verification code without a mobile phone.
2) Manage users
Any site user that has access to ‘Manage users’ can send a two-factor recovery code’ to any user on the site via the ‘Manage users’ section.
The verification code will go to the user’s email address. The user will then need to enter this code into the web or mobile app to login to the system.
There is not a limit to the number of times this can be done.
You can also contact the support team via [email protected] or call 0330 333 8433.
to request a two-factor recovery code.
Edit phone number
You can edit your phone number from this page.
Click on
