MFA is a security process that requires users to provide two or more distinct forms of identification before granting access to a system or account. Using an extra authentication factor for My Effectory will help you prevent unauthorized access to your account and safeguard your sensitive data, even in the event of a password leak.
MFA in My Effectory
At Effectory, we use email verification as a second authentication method next to entering the login credentials. You can activate MFA per user role. When logging into My Effectory, users for which it is enabled will receive an email as an additional factor to authenticate their login attempt.
-
Authentication email: The email contains a 6-digit code for one-time use, which you must enter in the login page. Alternatively, you can click on the link provided in the email. Both verification methods will enable a secure login to My Effectory.
-
Valid for 12 hours: Once you’ve verified your login, the authentication is valid for 12 hours on the same device, so you only have to authenticate once per day. After this timeframe, you will need to authenticate again following the same steps.
Important note: Please ensure that our servers are whitelisted in order for the users to receive our emails. For more information read the Setup email delivery section in this article.
Configuring MFA
MFA is required by default for Central and Employee Coordinators. These are the user roles that have access to the most sensitive information and must log in securely at all times. For these roles, MFA cannot be disabled.
For Project, Local, Result Access Coordinators, and Employees, this extra security feature is enabled by default. However, Central Coordinators can access the Multi-factor authentication settings in My Effectory, where they can enable or disable this feature per role, by following these steps:
- Log into My Effectory
- Go to the Organization tab
- Go to Security
- Select Multi-Factor Authentication (MFA)
- Use the checkboxes to determine which roles need to use MFA
Rules and restrictions of MFA
- The 6-digit code in the authentication email is valid for 5 minutes or until first use
- If you are using Single Sign-on for My Effectory, you must set up your own MFA and cannot use the Effectory MFA
- To turn MFA off (except for Central and Employee coordinators), change your settings in Security
- Once your contract with Effectory expires, your organization’s personal information, including email addresses and phone numbers, is safely deleted