Overview
Multi-factor Authentication (MFA) is an authentication system that requires a user to provide two or more verification factors for successful authentication, and is one of the most effective ways to protect valuable information and accounts against unauthorised access.
The Meshed Platform login process can be enhanced by enabling Multi-factor Authentication (MFA).
Meshed Platform Multi-factor authentication (MFA) functionality overview:
- MFA is enabled or disabled systemwide.
- Only SAdmin Users can configure MFA.
- Only SAdmin Users can enable or disable MFA for Users (Staff, Students, Teachers, Agents)
- Only SAdmin Users can manage MFA for enabled Users
- Uses a 6 digit One Time Passcode (OTP) for logging in.
- User OTP is provided via email. The User email address is used for sending the User OTP.
- The OTP is a unique password that expires and can only be used once, as the name suggests.
- User can resend a new OTP.
- User logging in is only successful with a valid OTP.
By default the Meshed Platform Multi-factor Authentication functionality is disabled.
Configuration and Management
Feature Access
Only SAdmin Users have access to the Admin > Configuration and Setup > Multi-Factor Authentication menu tab.
This menu tab displays the MFA Configuration and Management functionality.
Configuration
Navigate to the 1. MFA Configuration tab.
By default, MFA is disabled in a Meshed Platform until it has enabled by a ‘SAdmin’ User.
MFA is enabled by selecting Enabled.
When MFA is Enabled the additional configuration fields are displayed.
Currently the User OTP is provided via email only. The User email address is used for sending the User OTP.
MFA can be applied individually to the following User roles:
- Staff
- Student
- Teacher
- Agent
The MFA configuration History is displayed.
Manage Users
Navigate to the 2. View Enabled MFA Users tab.
Search to view the list of Users and the OTP status of each User.
Expired OTP codes can be re-generated by clicking on Gen New Code.
User Login
