MFA

Enabling MFA (Multi factor authentication)

Invotra supports multi-factor authentication (MFA) via SMS to verify the user, which significantly reduces the risk of a malicious attacker attempting to access the account

• Webmasters can enable or disable multi-factor authentication from the ‘Authentication’ page in ‘Administration’

Note:

• This is a global setting and affects all users logging in with email and password
• Users who authenticate via SSO will bypass the multi-factor authentication (however, the identity provider being used may have their own MFA (multi-factor authentication) solution)

Authenticating with MFA

1. With multi-factor authentication enabled, a user enters a valid email and password combination and a code is sent via SMS
2. The user will then need to enter the code within 3 minutes to complete authentication and access the site