Organization Settings: Multi-Factor Authentication

Note: MFA can only be enabled for the entire account by an agent with the appropriate permissions. MFA settings can only be managed by agents with the appropriate administrative permissions.

For Multi-Factor Authentication (MFA), Alloy supports SMS (for US numbers only) and Timed One-Time Password (TOTP). We recommend using TOTP with an authenticator app like Microsoft Authenticator or Authy.

This article will cover the following sections:

• Setting up MFA
• Resetting MFA

Setting up MFA

1. Navigate to the Settings > Authentication page
2. In the Other Configuration section, click the 3 ellipses ⋮ menu.
3. Click Edit Other Configuration.
4. Check the Multi-Factor Authentication Required option.
5. Click Confirm.

Once enabled, agents with MFA set up will be prompted to enter codes sent through either SMS their authenticator app.

Agents without MFA setup will be prompted to set up MFA they are able to complete logging into the dashboard.

It is recommended to confirm that all agents have the correct phone number listed before enabling this feature so that they are able to log in.

Resetting MFA

The account administrator can reset an agent's account in case they lose or change their phones and lose access to their MFA setup.

1. Navigate to the Settings > Agents page.
2. Locate the agent.
3. On the right, select the cog icon.
4. Click Reset MFA.
   

If MFA is required at the Account level, then the next time the Agent logs in, they will automatically be asked to set up MFA again.