What is Two Factor Authentication?
The main difference to standard login is that when enabled, 2FA adds a second layer to the general username and password prompts at sign-in. 2FA adds an additional authentication layer which heavily reduces the risk of your credentials being compromised.
The premise is 2FA relies on two forms of authentication:
Something you alone should know, like your user ID/password
Something you always have on you which generates a secure code e.g., smartphone
Enabling 2FA security is an easy process that can be completed by scanning a QR code from your mobile device using an authenticator app. Unless someone else has your smartphone, they won’t be able generate the current 6-digit code. The Authenticator app reproduces a new 6-digit number every 30 seconds, so even if someone else knew your code previously, they're unable to access your Cognise account data.
Enabling 2FA
Two Factor Authentication is available to companies out of the box. System Admins activate 2FA by following these simple steps:
Navigate to Config in the main menu.
Check the box Enable 2FA for users under Company Setup.
Once enabled a second checkbox will display. By default it is unchecked. Admins can check the box to Require 2FA for all users, which will make 2FA compulsory to access Cognise. If SSO is enabled, it will still be compulsory in addition to SSO access.
Click the Save button to finish.
User Setup
Once enabled, all users will see under their icon > edit profile the 2FA.
Once the user clicks Setup Now they will see the QR code which they can scan using an authenticator app on their mobile device. Common authenticators apps are Microsoft and Google.
