Multi Factor Authentication (MFA) is a security feature that requires users to provide multiple forms of verification, such as passwords, physical devices, or biometric information, to access their account. It adds an extra layer of protection, making it harder for unauthorized individuals to gain access to sensitive information, even if they have obtained the user's password.
To enable Multi-Factor Authentication, navigate to Settings > Configuration.
By selecting the option "Enable Multi Factor Authentication," other users who log in to your account will be able to set up MFA. Users will need to set this up using an MFA app such as 2FAS and Duo.
The option "Enforce Multi Factor Authentication" will require your users to set up MFA. Once enabled, they will be prompted to set it up the next time they attempt to log in.
The final option, "Allow Multi Factor Authentication for Online Bookings," will provide an additional layer of security for patients who book online on your Connect site.
Setting up through MFA App
NOTE: If you do not have a mobile number associated with your account you will need to ask your system administrator to add this for you.
Click on your initials at the top right-hand corner of the page and select "Setup Multi Factor Authentication."
A screen will appear with a QR code to scan using an MFA app on your phone. Make sure one of the MFA apps listed above is installed on your device.
Once the QR code is scanned, the app should open automatically. Follow the steps to save the details, and you will be provided with a code.
Enter the code and press "Continue." You should receive a confirmation message.
To test if MFA is working, simply log out and attempt to log back in. You will see an extra layer of security after entering your password, prompting you to enter the MFA code.
You can enter the code shown on the MFA app, or if your mobile number is associated with your user account, you can receive a text message as an alternative. If you need to reset a users MFA please follow the steps here.
NOTE: If you do not have a mobile number associated with your account you will need to ask your system administrator to add this for you.
Setting up a Passkey
What is a passkey? A passkey is a security code or cryptographic key used to authenticate and authorize access to a system or resource, like a password or PIN. It verifies the user's identity and prevents unauthorized access. This will allow to bypass typing in your details to login.
To set up a passkey navigate to your login name at the top right of and select Add a Passkey
You will then be presented with two options, one to set up a passkey using an external security key or built-in senor and one to use a different device. An external security key would be through a usb key, the built-in sensor would be something like a fingerprint reader to unlock your laptop or computer.
If you choose External security key or built-in sensor your web browser will ask to access your computer and will then ask you to either insert a security key USB or to use your finger print to verify your idenity. Once you have done this you will get a message confirming this has been set up.
Choosing a different device ask to enable bluetooth on your computer and ask you to scan a QR code.
Scan the code and follow the steps on your mobile device to set up the Key. Once you've accepted you'll get a mesage to say it's been set up -
Once set up when you next go to login, select Sign In WIth Passkey. Select either the security key, built-in senor or your mobile device, depending on what is set up. Follow the steps on screen and once complete it will log you in.