Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA)

Table of Contents

Overview

Multi-factor authentication (MFA) adds an extra layer of security to your accounts by requiring multiple verification forms during the login process. QbDVision supports the Time-based one-time password (TOTP) standard.

MFA is enabled at the Company level. Once turned on, all users will be prompted to set it up and use it at their next login.

MFA is not available if your company uses single sign-on (SSO).

A company administrator must first request that MFA be enabled for all users in a company account before setup is required. Once enabled, users will be prompted to set up MFA for their account when they next sign in. This guide will walk you through the steps to set up MFA using a third-party app on your mobile device.


Setting Up MFA

Step-by-Step Instructions

Note: The instructions listed below are for the Google Authenticator app, which is used in the example. The general steps should also apply to other authenticator apps.

 

  1. Download the Authenticator App:

    • Go to the app store on your mobile phone (Google Play Store for Android or App Store for iOS).

    • Search for "Google Authenticator" or the preferred authenticator app of your choice.

    • Install the app on your cell phone.

  2. Set Up MFA Using the Authenticator App:

    • On the account settings page, you will see a QR code.

    • Open the authenticator app on your cell phone.

    • Tap on the option to add a new account or scan a QR code.

    • If prompted, grant the app permission to access your camera.

    • Point your phone camera at the QR code on the account settings page.

    • The authenticator app will scan the QR code and automatically configure the account.

  3. Verify the Setup:

    • After scanning the QR code, the authenticator app will display a code associated with the account.

    • Return to the QbDVision account settings page on your computer or mobile browser.

    • Enter the code displayed in the authenticator app into the provided field.

    • Submit the code to verify the setup.

    • The account should now be linked to your authenticator app.

  4. Test the MFA Process:

    • Log out of your QbDVision account (if you have already been logged in).

    • Refresh to load your account login page.

    • Enter your username and password.

    • When prompted for the MFA code, open the authenticator app on your cell phone.

    • Find the QbDVision account linked in the authenticator app and note the code displayed.

    • Enter the code from the authenticator app into the login prompt.

    • Complete the login process.


Frequently Asked Questions

 

How do I reset my MFA?

A user must contact the Administrator of their company’s account to reset their MFA. Administrators will then navigate to the user’s profile and click the Reset MFA button in the upper right-hand corner (see screenshot below). Once reset, the user will be prompted to re-configure MFA for their account.

Does QbDVision support two-factor or multi-factor authentication with SSO accounts?
QbDVision does not support two-factor or multi-factor authentication on Single Sign-on accounts. Users can configure two-factor and multi-factor authentication through their SAML Identity Provider system.

 

What types of MFA do you support?

TOTP (Time-based One-Time Password): QbDVision implements the TOTP standard for generating and verifying one-time passwords. This method uses a secret key, a fixed time interval, and the HMAC-SHA1 algorithm to produce 6-digit codes.

TOTP is a widely adopted internet standard and is compatible with many MFA providers, such as Microsoft, Google Authenticator, and Authy. Any other providers that adhere to this standard should also function as expected.

We don't support other methods (e.g., SMS or Biometrics) at this time.