Initial Authentication Setup
To use two-factor authentication, you must have the following ready: - an authenticating device: this is usually a personal device you have access to during the login process, e.g., your smartphone,
- an authenticator app installed on your authenticating device.
There are a number of free third party Authenticator apps that you can easily download to your personal devices. Some popular ones are Google Authenticator, Authy and Microsoft Authenticator.
NOTE - The authenticating procedure may vary slightly for different apps but they all involve scanning a QR Code or manually entering an entry key, and then obtaining the authentication PIN for login. |
Procedure: - At the CMS login screen, enter your Username and Password, then click Login.
- Instead of being logged in, the Authentication popup displays.
 - Open the authenticator app on your authenticating device.
- Either scan the QR Code or type in the Manual Entry Key. NOTE - if the 'Manual Entry Key' option is used, ensure 'Time-Based' is selected if you are asked to select a 'Type of Key' option.
- The authenticator app generates a PIN that expires in a set amount of time. Enter this PIN in the Authentication popup.
- Click Verify and Login. If the PIN is valid, access to CMS will be granted.
Subsequent Logins- Once you have successfully set their 2FA, the authenticator app saves the account for CMS login. At the next login, you simply open the authenticator app in your device to obtain a valid PIN. This PIN is entered after the Username/Password step.
Failed Logins- You have five attempts at logging in. After the fifth failed attempt, you will be locked out for an hour.
Reset 2FA by User- An authenticated User can reset and set up a new authentication when logged in CMS. To reset authentication, they just follow the steps for User Reset for 2FA. Once the procedure is completed, the new authentication will automatically replace the old one.
|