Two Factor Authentication

Two Factor Authentication, also known as 2FA, is an extra layer of security that is known as "multi factor authentication" that requires not only a password and username but also something that only, and only, that user has on them.

What is Google Authenticator?

Google Authenticator is an application that implements two-step verification services using a Time-based one-time password. The Authenticator provides a six- to eight-digit one-time password which users must provide in addition to their username and password to log login.

What is YubiKey?

When YubiKey is plugged into the USB port of any PC and the button is pressed, the device provides a character string which is used as a one-time password.

Setting up 2FA

You will have to get the mobile application on your phone from their respective application stores. Or connect your YubiKey to any USB port.

Click on the following link: https://my.tilaa.com/en/users/security

When you are logged in you will be taken to the page where you will find "Two Factor Authentication" on the right hand side.

Screenshot_2019-07-16_at_14.02.26.png

Click 'Setup'.

Activate Google Authenticator:

You can activate Google Authenticator by clicking "Activate"underneath Google Authenticator. Scan the QR code by opening your Google Authenticator app on your phone and selecting 'Begin Setup', select 'Barcode' and scan the QR code with your mobile phone's camera.

Fill in the 6 figure code generated on your phone.

If you have not added your mobile phone number to your account, you can also add that on the page on our website. In the event you misplace your 2FA device, you will be able to reset or retrieve access to your Tilaa account. 

Download the backup codes and keep them somewhere safe.

Activate YubiKey:

You can activate YubiKey by clicking "Activate" underneath YubiKey.

Click in the field on the right hand side and generate one-time passcodes with a YubiKey hardware dongle.

Screenshot_2019-07-16_at_14.42.31.png

Click on "Submit".

If you have not added your mobile phone number to your account, you can also add that on the page on our website. In the event you misplace your 2FA device, you will be able to reset or retrieve access to your Tilaa account.

Download the backup codes and keep them somewhere safe.

Globally enforce two factor authentication

If you want all the users on your account to use 2FA you can globally force this from our Dashboard.

Follow this link: https://my.tilaa.com/en/users/twofactor_options

When you have 2FA active you can choose to enable the policy globally for all users. Toggle the option you want to force (YubiKey or Google Authenticator) and click on Save.

Restoring access

When you have lost your device, phone or otherwise cannot receive codes, you can use back-up codes to sign in.

These codes are available here, on the right hand side: https://my.tilaa.com/en/users/twofactor_options

They were first offered to you at the end of the 2-Step Verification setup. The codes come in sets of 10 and you can generate a new set at any time, automatically making the old set inactive. In addition, after you’ve used a back-up code to sign in, it will become inactive.

We recommend you store your codes wherever you keep your other valuable items. Like the codes on your phone, back-up codes are only valuable to someone if they manage to steal your password as well.

Hebt u meer vragen? Een aanvraag indienen

0 Opmerkingen

Artikel is gesloten voor opmerkingen.