Difficulty: simple
Content
Learning Objectives
After reading this article, you:
Know the options there are regarding 2FA in Workplace Management.
2FA availability for Workplace
2FA is available for Workplace Management and Workplace Maintenance. For other Workplace solutions it is best practice to use SSO.
How does 2FA work?
Via two-factor authentication, it can be arranged that a user, after entering the login details when login in, will receive a second login screen in which a login token must be entered. This token is sent to the email address of the user. Only after this token has been entered, the user is logged into Workplace Management. Making access to the system more secure.
Tokens are always sent to the email address that is linked to the user. Currently, other channels such as SMS text are not supported.
2FA is never used combined with SSO.
Implementation methods
There are two implementation methods available.
Mandatory for ALL users. Directly after Spacewell Support enables this setting in the client settings, 2FA is active for all users (with the exception of Partner users).
Mandatory only for users to whom the group "Two factor authentication" (FMB-G043) is assigned. After Spacewell Support enables this option, consultants and system admins have the option to assign the group "Two-factor authentication". The group can be:
Added to a User profile. After adding the 2FA group to the profile, all users that have this profile need to sign in using 2FA.
Assigned directly to a user. To do this: open the user > click on ‘Assign group.
Enabling 2FA
Two-factor authentication is a payed service. Contact our Sales team, Workplace account manager, or Partner manager for details.
After choosing one of the available implementation methods, 2FA is enabled by our Support department on the agreed-upon date and time. When the group authorization method is chosen, the system administrator (not Spacewell Support) is responsible for adding the 2FA-group to the profile of users.
Summary
Exercise
- NA
Search