Multi-Factor Authentication

1. In the Infinity Portal, click your user name in the upper-right corner to open the Profile Settings page.

2. In the Phone verification section, select your country from the list.

3. Enter your mobile phone number.

4. Click Send code.

   Check Point sends an SMS to your phone with a six-digit code.

5. Enter the code in the Code field.

6. Click Verify.

1. Download one of these authenticator applications to your mobile phone:

   • Google Authentication

   • Microsoft Authenticator

   • Authy

2. In the Infinity Portal, open the Profile Settings page. In the upper-right corner:

   • Click the user name, or

   • Click the arrow next to the user name > Profile Settings.

   The Profile Settings window opens.

3. Toggle the Enforce Multi-Factor Authentication switch to ON.

   The Enforce Multi-Factor Authentication configuration wizard opens.

4. Follow the on-screen instructions to connect the authentication app to the Infinity Portal.

   Note - If you did not verify your phone number in the Profile Settings window, you must verify it in the Multi-Factor Authentication configuration wizard.

5. If you want to require yourself to use MFA for all Infinity Portal accounts, keep the toggle on. If you want to use MFA only when required by a Primary Administrator of an account, switch the toggle to off.

6. Click Finish to close the wizard.

If your organization uses SSO authentication and does not enable MFA as part of it, you can require yourself to use MFA every time you log in to the Infinity Portal. This is valid even when the Primary Administrator of the Infinity Portal account does not require MFA.

Configuring MFA for your account:

1. In the Infinity Portal, open the Profile Settings page. For this, in the upper-right corner:

   • Click the user name, or

   • Click the arrow next to the user name and select Profile Settings.

   The Profile Settings window opens.

2. Toggle the Multi-Factor Authentication (MFA) switch to ON.

   If you do not have an authentication app configured, the Multi-Factor Authentication (MFA) configuration wizard opens. Follow the steps in the wizard to configure an authentication app or to require MFA through SMS.

   Note - If you did not verify your phone number in the Profile Settings window, you must verify it in the Multi-Factor Authentication (MFA) configuration wizard.

3. Click Finish.

In the Infinity Portal, click > Users.

The 2FA configured column of the table shows one of these 2FA configurations for each user:

The MFA table row shows you the MFA authentication method(s) that the user configured for themselves in Profile Settings. This table row is not related to the MFA enforcement policy for the account.

Reset a user's phone number in these scenarios:

• The user gets a new phone with a new number.

• The user's phone is lost or stolen.

• The user has a problem using MFA with SMS.

To reset the user phone number:

1. In the Infinity Portal, click > Users.

2. Click the table row with the name of the user.

3. Click Edit.

   The Edit User window opens.

4. In the Phone number field, enter a phone number for the user.

5. Click Save.

Reset an authentication app for a user when the user gets a new phone (with the same phone number) or has a problem with the app.

After the reset, if MFA is required for account login, Check Point sends an SMS with an authentication code to the user's verified phone number. Then, the user can log in to the Infinity Portal and create a new authenticator app configuration (see Configure an authentication app for MFA).

To reset a MFA application:

1. In the Infinity Portal, click > Users.

   The 2FA configured column of the table shows one of these MFA configurations for each user:

   Icon	MFA Configuration
   	The user does not have MFA configured.
   By app	The user has MFA configured with an authenticator app.
   By phone	The user has MFA configured with SMS.
   App and phone	The user has MFA configured with an authenticator app and with SMS.

2. Select a user from the table and click Reset MFA.

3. To see updated user information, click Refresh.

MFA enforcement settings on the Identity & Access page apply to all users of this Infinity Portal account. Only a Primary Administrator can change these settings.

1. In the Infinity Portal, click > Identity & Access.

2. In the Multi-Factor Authentication (MFA) section, select when to enforce MFA:

   • Enforce MFA for all logins, including SSO - Users must use MFA to log in with username and password and for login with SSO through an Identity Provider (IdP).

   • Enforce MFA for login with username and password - This option is selected by default.

   A confirmation window opens.

3. In the confirmation window, click Enforce.

A Primary Administrator can allow Infinity Portal users to bypass the MFA verification for 14 days after they successfully sign in to the Infinity Portal with a trusted device.

1. In the Infinity Portal, click > Identity & Access.

2. In the Multi-Factor Authentication (MFA) section, select Allow trusted devices to skip MFA for 14 days.

When users enter their verification code on their login to the Infinity Portal, they can select the option Remember this device for 14 days.