Is the MFA feature paid or free of charge?
A: The MFA feature is free of charge for users’ security.
What does MFA mean?
A: MFA stands for Multi-Factor Authentication. Multi-factor Authentication (MFA) is an authentication method that requires the user to provide two or more verification factors to gain access to a resource such as an application, online account, or a VPN. MFA is a core component of a strong identity and access management (IAM) policy. Rather than just asking for a username and password, MFA requires one or more additional verification factors, which decreases the likelihood of a successful cyber attack.
Which Tokeet products support MFA?
A: MFA is now available for TV3, Sympl and AdvanceCM. We will implement MFA for other Tokeet Apps in the future.
How many types of MFA are supported by AdvanceCM?
A: AdvanceCM supports four types of MFA:
Email
SMS
WhatsApp
TOTP
Which is the preferred delivery method of MFA?
A: SMS, WhatsApp and TOTP are preferred methods.
Is MFA enabled by default for new AdvanceCM Accounts?
A: Yes, MFA is enabled by default for all new AdvanceCM users.
For Email-based MFA, which email address will get the verification code?
A: You get a verification code on the email address which you use to log into AdvanceCM.
For SMS-based MFA, which mobile number will get the verification code?
A: The Phone Number saved in your user settings will receive the SMS.
For WhatsApp-based MFA, which mobile number will get the verification code in the WhatsApp account?
A: The Phone Number saved in your user settings will receive the WhatsApp message.
For TOTP-based MFA, where will the user get the verification code?
A: You will get the verification code on an Authenticator Application which will be synced with your TOTP QR Code. You can download any Multi Factor Authenticator App from Google.
What does the option “Skip MFA Challenge” mean?
A: “Skip MFA Challenge” means that you will not be asked for a security code on this device or browser if you log in on a regular basis. But if you do not login on the same device or browser for 15 days then it will ask you again for a Security Code before letting you log into the account.
How long can you skip MFA in your browser?
A: MFA will be skipped for 15 days, you cannot increase or decrease this time period.
Once I saved settings to Skip MFA Challenge on the browser, How can I undo it?
A: There is a “Do not Skip" button in the MFA Configuration popup which allows you to do this.
How does the “Resend Code” feature work?
A: The “Resend Code” feature generates and sends a new verification code to the user if the initial code was not received or has expired, allowing them to complete the authentication process.
Why do I get an unexpected login email notification?
A: This email goes out to your email address if you log in with a new IP Address or location.
What happens if I “skip MFA for this device” and then change the authentication method, will I have to enter the code yet again?
A: No, skipping does not correlate with the authentication method, just the device.
What will happen if I select “Skip MFA Challenge” on one browser and then login on another browser, will it ask me for Security code using my selected delivery method?
A: If you log in on another device or browser or even open AdvanceCM in a private window then the Skip MFA challenge bypass will be ended and you will be required to enter security code to login
Can individual users enable MFA on their account if the Admin has not required it?
A: Yes, each user has MFA settings under the User Settings overlay, where each user can set MFA and delivery method for themselves only.
How can I know that the Admin has activated MFA? Do I receive any kind of notification?
A: A message will be displayed in your MFA settings if an Admin has enabled MFA on the account.
Can new users on Trial also use this MFA feature?
A: Yes, MFA is applicable for all types of users.
Can I change the mode of verification for my MFA?
A: Yes, you can. Various methods of verification are available - Email, SMS, WhatsApp, TOTP.
What will happen if I change my password?
A: When you change your password all other active sessions will be immediately invalidated.
Is there any restriction on Adding Payment gateway?
A: Only admin users can add payment gateways now. Admins have to enable MFA when adding a gateway. If admins do not have MFA enabled then they cannot add payment gateway.
As always, please contact us with questions any time. We're happy to help.