MFA

Multi-factor authentication (MFA) is an access control technique that requires a user to provide one or more additional proofs of identity on top of the password and username.

This feature is available in the Essential plan and higher.

You may set up MFA for your account in Control Panel > Profile (top right corner) > Security, where you can also find an overview of MFA settings for all your Teams and can easily navigate to the settings of each of them.

By enabling MFA you will be prompted to enter a security code from an TOTP-based authentication app (e.g. Google Authenticator, Microsoft Authenticator, Authy or 1Password) every time you log in.

Managing Team MFA

You may manage Team MFA in Control Panel > Settings > SSO & MFA > Edit button of GoodAccess Identity.

Once enabled, Team Admins or Members will be forced to use MFA while logging in to the Control Panel, Client Application, or both, depending on your configuration.

Users without existing MFA will be prompted for setup upon their next login.

Control Panel login

Team Admins will be prompted to enter a security code from an authentication app every time they log in to the GoodAccess Control Panel.

Client Application login

Team Members will be prompted to enter a security code from an authentication app every time they log in to the Client Application.

In addition you may enable 2 other options for Client Application login:

• Client Application connection - Require MFA before each Client Application connection.

• Client Application session timeout - Request another Client Application MFA after a specific time period.

Reset of MFA

In case you have lost or changed your device and need MFA to be reset, please contact our technical support.