Enable Two-Factor Authentication

Select Account Administration > Security... > Two-Factor Authentication.

Click the Edit button.

Select the"Require users to set up two-factor authentication (recommended). option.  

Select the user type(s) to enable the two-factor authentication for:

1. For all users (Auth Reps, Admins, and Users).

2. For Admins and Authorized Representatives.

3. For Authorized Representatives only. 

When two-factor authentication is set up and the user selects to remember this device, require logging in with Two-Factor Authentication: (select the frequency)

1. Every time the users sign in 

2. Once per day

3. Once per month 

   If this setting is changed, two-factor authentication will be required on the next login. Two-factor authentication will always be required when a user logs in from a new device or browser, or when using Incognito or Private Browsing.

Select the Allowed Authentication Methods:

1. Device Authentication: This method requires additional hardware to support it (Windows Hello, Face ID, Touch ID).

2. Security Key: This method requires an additional hardware purchase to support it (FIDO2 and U2F keys).

3. Authenticator App: This method requires an App download (Google Authenticator, Microsoft Authenticator, Authy, 1Password).

4. Text Message (SMS): This method requires a mobile phone (Standard carrier messaging or data rates apply).  

   Users that have opted out of receiving CMD text notifications will not receive text authentication messages. The user must text the word 'RESUME' to 74121 for the service to be turned back on.

Click Save.