Setting up two-factor authentication

This article explains how to set up two-factor authentication in Cloud Identity Plane user dashboard.

About two-factor authentication options in CIP

Two-factor authentication adds another authentication challenge on top of the user-password combination. The following two-factor authentication methods are available in CIP:

  • None - two-factor authentication is disabled

  • One-time password - the second authentication step requires providing a temporary password sent to your e-mail or phone

  • Knowledge-based authentication - the second authentication step requires answering the questions you have set up previously

  • Authenticator app - the second authentication step requires using a mobile app

  • DUO - the second authentication step is provided by Duo

    Note

    Duo is only available if it has been set up for your organization.

Every authentication method has the following options depending on its current status:

  • SELECT - switch to the given method. Only available if this method has been set up previously.

  • SETUP - set up the given method. Only available if this method is not currently set up.

  • CONFIGURE - change the current setup of this method. Only available if this method has been set up previously.

  • RESET - reset this method to the default settings. Only available if this method has been set up previously.

Two-factor authentication is not used when you are using a trusted device.

Setting up two-factor authentication

Check the video or read the instruction below to learn how to set up two-factor authentication for your user account.

Video

Watch the video below to learn how to manage two-factor authentication.

Instruction

  1. Select Account Security from the home page or Two-factor Authentication from the left-hand menu.

    Expected result

    You are redirected to the Two-Factor Authentication page.

  2. Select the authentication method to be used (hover the cursor over the menu item with the method you want and click SELECT).

    Note

    If SELECT is not available, use the SETUP button to set up the authentication method first.

    Expected result

    You are prompted to complete the authentication challenge for the selected method.

  3. Complete the authentication challenge.

    Expected result

    Two-factor authentication method is updated after successfully completing the challenge. On the next login attempt, you will need to complete the two-factor authentication process in accordance with your configuration.