Two Step Authentication

Two Step Authentication, also called (Undefined variable: Vars_Other.tp_2fa_full), provides additional security on your account. The first factor is your usual password. The second is a code retrieved from Google Authenticator via your smartphone (iOS or Android).

In SMP, depending on your permissions, you can set Two Step Authentication on the system level (affects all administrators) or on the domain level (affects all users under the current domain).

  • A System Administrator can set two step authentication on the system level and on the current domain.

  • A Multi Domain Administrator can only set two step authentication on the current domain.

  • A Super User can set two step authentication on all users on the current domain.

An administrator logged in with None as the domain name can only affect administrators on the system level.

An administrator logged in to a specific domain can affect both administrators and all users under that domain.

To enable two step authentication for administrators:

  1. On the System > Settings > Two Step Authentication page, select the checkbox Enable Two Step Authentication.

  2. Click Save.

To enable two step authentication for all users under a domain:

  1. On the Service Domain > Settings > Two Step Authentication page, select the checkbox Enable Two Step Authentication.

  2. Click Save.

After Two Step Authentication is enabled, an email that contains a QR code is sent to all affected users.

When you receive the email:

  1. Use the Google Authentication Mobile Application to scan the QR code. To get this application, click the relevant link for iPhone or Android users in the email.

  2. After you scan the QR code, the app provides you with a temporary verification code.

  3. In the login screen, enter your user name and password.

  4. Click Login.

  5. In the second screen, enter the verification code from Google Authenticator.

  6. Click Apply.

In the mobile app, each user receives a unique account that is concatenated by the SMP system name + user name + domain name. An administrator receives a unique account that is concatenated by the SMP system name + user name.

Note - If an administrator changes the SMP system name (under System > Settings > General > SMP System DNS Name) while Two Step Authentication is enabled, a new QR code is generated and sent by email to all the affected users.