Two-Factor Authentication

you can use single connect for two factor authentication (2fa) to know who reaches your devices system admins configure and test 2fa definitions during deployment single connect 2fa is available in offline mode with the mobile application prerequisite if you haven’t already, download the single connect mobile client from the app store or google play store before you begin with the following steps see docid\ u1sy3un65wmqainruqxmv offline token adding offline token follow the steps below to add an offline token step 1 generate a qr code from single connect web gui log in to single connect web gui navigate to administration > 2fa provisioning here you will find the qr code and the activation code to generate a new qr and activation code, select generate new one step 2 generate a token in mobile client open single connect mobile client app and log in with your single connect user navigate to offline token generate a token with any of the following methods scan qr code – you must allow the app to access and use the camera enter the code manually with your user name register token the tokens you generate with any of these methods will appear on the offline token screen note that the 2fa code will be generated for a pre set time interval on the mobile application exporting and importing tokens you can export your tokens to copy them to another device or simply protect them from loss due to updates to export tap on the offline token menu select export, and it copies the collection of tokens in an encoded format and adds them to the clipboard to keep it as a backup, paste it into notes or email to import a backup select and copy the backup text you stored in notes, email, etc tap on the + button on the top right corner, and the activation screen opens select import token tap on ok on the your tokens are imported successfully dialog box protecting tokens with mfa single connect’s built in mfa can be used as a secondary layer of authentication for logging into the mobile application for its online features (approval management, geo fencing and password manager) admin and user must install the single connect mobile app and register a token to receive offline tokens with the mobile app (you get the offline tokens from the offline token > add > register token menu) otp must be enabled for the user group that will be using mfa for mobile application connections to enable mfa for mobile application navigate to administration > system config man set the mobile application otp enabled parameter as true after these settings are done and a login operation was started on the mobile application, the application will automatically look for a registered token in its offline tokens with the name that matched the tfa otp issuer parameter if there are registered tokens with other names, then it will prompt for user to select a registered token if the current six digit value of the offline token (either the automatically or the manually selected one) is validated with the server, login will be successful if there’s no registered token in the mobile application and mfa is enabled with the parameter above, registering token also requires a multi factor authentication the system will send a one time password (otp) user’s phone number user will be asked to enter the otp on his/her mobile application the mobile application mfa functionality works only with the registered tokens to ensure that the offline tokens are only working in one application at a time