Using Multi-Factor Authentication (MFA) in ImpexDocs

Multi-Factor Authentication (MFA) is now available in ImpexDocs !

What is MFA ?

Multi-factor Authentication (MFA) is an authentication method that requires the user to provide multiple verification factors to gain access to an application. MFA is a core component of a strong identity and access management (IAM) policy. 

Rather than just asking for a username and password, MFA requires additional verification factors, which decreases the likelihood of a cyberattack.

In ImpexDocs, MFA is activated at a user level and can be optionally be activated by the user for added security, if required. If MFA is activated for a user, in addition to Userid and Password the user will also need to enter a One-time code in order to login to the application. This One-time code is randomly generated using common mobile apps such as Google Authenticator, Microsoft Authenticator, Free OTP etc. 

How to Activate MFA in ImpexDocs ?

Users need to login to ImpexDocs using their current userid/password. Once logged in, Go to My Account, by clicking on the top right corner under your user name. 

and Activate Multi-factor Authentication for that user.  

When the user logs in to ImpexDocs using their existing userid/password for the first time after MFA is enabled, they will see the below screen after entering the Userid/password :

The user needs to download on mobile one the of popular Authenticator/OTP app such as Google Authenticator/Microsoft Authenticator etc. and scan the above QR code. 

When the above QR code is scanned a One-time code is generated by the app. This One-time code needs to be entered on the above screen. This One-time code refreshes every 30 seconds. 

Next time the user logs in to ImpexDocs, they DO NOT need to scan QR code etc. All the user needs to do is to enter their existing userid/password and once prompted for a code, access their authenticator app and enter the One-time code to access ImpexDocs. 

In short once MFA is enabled, in addition to userid/password a unique One-time code will be required to access ImpexDocs. This will secure users access to ImpexDocs and will prevent unauthorised access.