Organization Settings: Multi-Factor Authentication

For Multi-Factor Authentication (MFA), Alloy supports SMS (for US numbers only) and Timed One-Time Password (TOTP). We recommend using TOTP with an authenticator app like Microsoft Authenticator or Authy.

MFA can be enabled for the entire account by an agent with the appropriate permissions.

This article will cover the following sections:

• Setting up MFA
• Resetting MFA

Setting up MFA

1. Navigate to the Settings > Organization page
2. Check the Multi-Factor Authentication Required
3. Click Save.

Once enabled, agents with MFA set up will be prompted to enter codes sent through either SMS their authenticator app.

Agents without MFA setup will be prompted to set up MFA they are able to complete logging into the dashboard.

It is recommended to confirm that all agents have the correct phone number listed before enabling this feature so that they are able to log in.

Resetting MFA

The account administrator can reset an agent account in case they lose or change their phones and lose access to their MFA setup.

1. Navigate to the Settings > Agent page.
2. Locate the agent.
3. On the right, select the cog icon.
4. Click Edit Agent.
   
   
5. Toggle Multi-Factor Authentication is enabled off.

If MFA is required at the Account level, then the next time the Agent logs in, they will automatically be asked to set up MFA again.

If MFA is not required at the Account level, then toggle Multi-Factor Authentication is enabled back on for that individual Agent. This will trigger a MFA set up for that specific agent only.