Logon Settings: Two-factor authentication

    With two-factor authentication (2FA), you can add an extra layer of security to SecureAI. When technicians try to access the SecureAI interface, they will not be allowed to proceed until 2FA is completed. SecureAI provides options to perform 2FA through authentication services such as Google Authenticator, one-time password via email, Microsoft Authenticator, and SMS verification.

    Prerequisites

    • Delegated access to the Logon Settings tab in SecureAI.
    • Configured email server settings to use one-time password via email.
    • Configured SMS gateway settings to use SMS verification.

    Steps to configure 2FA in SecureAI

    1. Navigate to the Delegation tab.
    2. In the left pane, under Configuration, click Logon Settings.
    3. In the Logon Settings page, navigate to the Two Factor Authentication tab.
    4. Toggle the Two-Factor Authentication button on to enable 2FA.
    5. Select the desired 2FA from the following authentication services:
      • Google Authenticator
      • One-time password via email
      • Microsoft Authenticator
      • SMS Verification
    6. To manage the 2FA enrollment of technicians, click Enrolled Users. The list of enrolled technicians is displayed with their user name, domain name, and authentication type. If needed, you can delete a technician's enrollment so that they configure 2FA again.
    7. Click More options to configure the following:
      • Select Enable the 'Trust this browser' option during authentication to trust the browser and let authenticated help desk technicians access SecureAI without requiring 2FA for the number of days specified in Trust this browser for.
      • Select Skip 2FA for the selected technicians and select the technicians from the pop-up window to allow them to skip 2FA while logging in to SecureAI.

    For technicians: Enrolling your authenticator

    Google Authenticator

    1. Install and set up Google Authenticator on your smartphone.
    2. Switch to SecureAI and expand Google Authenticator.
    3. Click the Enable Google Authenticator button.
    4. While logging in to SecureAI, enter the code generated by the Google Authenticator app on your smartphone, in addition to your username and password.

    One time password via email

    Email server settings have to be configured to use one-time password (OTP) via email as the 2FA method.

    1. Expand One time password via email and select the One time password via email option.
    2. Enter a subject and draft a message using macros in the Subject and Message fields, respectively.
    3. Click Save.

    Microsoft Authenticator

    1. Install and set up Microsoft Authenticator on your smartphone.
    2. Navigate to SecureAI and expand Microsoft Authenticator.
    3. Select the Enable Microsoft Authenticator option.
    4. While logging in to SecureAI, enter the code generated by the Microsoft Authenticator app on your smartphone, in addition to your username and password.

    SMS Verification

    To enable SMS verification as an authentication method, configure the SMS gateway settings in SecureAI and follow these steps:

    1. Expand SMS Verification and select Enable SMS Verification.
    2. In the Message field, enter the SMS content using macros, and click Save.

    Steps to enroll your phone number

    1. Log in to SecureAI using your account credentials.
    2. In the Log in using SMS Verification page that opens, enter your phone number and click Send Code.
    3. Enter the six-digit secret code you received through SMS. If needed, select the Trust this browser option to skip this step for the period configured by your administrator.
    4. Click Verify code.