User Guide - Enabling Multi-Factor Authentication (MFA)

What is MFA?

Multi-Factor Authentication (MFA), also known as Two-Factor Authentication (2FA), adds an extra layer of security to protect users and software from unauthorized access. It requires users to verify their identity through two or more methods during login, significantly reducing the risk of compromised credentials.

Where is it Configured?

Effective August 2026, Smartwebs Support configures this setting at the Management level. Once the MFA feature is set to Required for a management, Global Admin users have the ability to initiate enrollment and/or reset MFA at the user level.

Refer to: Administrator Playbook to Support Multi-Factor Authentication (MFA) 

When Does it Apply?

Once a user has enrolled in their authentication method of choice, MFA will prompt at initial login, and for any unusual login attempt, per the following process:

1. User enters username and password.
2. User is prompted to verify their identity.
3. User enters the verification code (text or email method) or approves the authentication request (app method).
4. User is logged into Smartwebs.

Who Controls It?

Effective August 2026, Smartwebs Support configures this setting at the Management level. Once the MFA feature is set to Required for a management, Global Admin users have the ability to initiate enrollment and/or reset MFA at the user level.

How Does it Work? 

MFA settings are configured by Smartwebs at the Management level.

Once the setting is configured to Required or Optional at the Management level, users may self enroll and manage their MFA preferences as follows.

1. Access Profile > User Settings > Sign in & security:

2. Authenticate using one of the following methods:

• Email Verification Code
• Text Message Verification Code
• Authenticator App (Google Authenticator, Duo, or another compatible app)

You must set up at least one authentication method during enrollment. You may configure up to three authentication methods, and select one as Preferred.

3. Important! Be sure to hit Save after adding your Authentication method(s):

4. Once enrolled, use the Sign in & security page to:

• Review current MFA configuration
• Update email used for MFA
• Update phone number used for MFA
• Change preferred authentication method
  
  
  
  

5. Click the MFA Enabled button, which points to Sign-In & Security. 

Note: You will be prompted to re-enter your password to make changes to this area.

Can Administrators Prompt MFA for a User? 

Global Admin may prompt MFA enrollment of individual an user(s), once the MFA setting at the Management level is set to Required.

The Global Admin of the account must contact Smartwebs Support to update the Management level account settings. 

1. To force MFA enrollment, the MFA configuration at the Management level must be set to Required.

Once Required, Admin may Reset MFA for a User, which will also reset their password:

2. User will receive a Password Reset email, which will prompt MFA enrollment: