Skip to main content

Security

How to setup "Two factor authentication"

In this short tutorial we guide you through the necessary steps to secure your application even further

What is Two-factor authentication?

2FA is a security mechanism, where you have to provide your passwort plus a second piece of evidence - in most of the cases via mobile phone.

M.App Enterprise

In M.App Enterprise you have the possibility to set 2FA at various places with the limitation that only TPA (Third-party authenticator) is supported.

That means as soon as you enable it you are forwarded to the following screenshot, where you have to scan the QR code and afterwards put in the first token you receive from the authenticator app.

You have two possibilities in M.App Enterprise for 2FA:

  • optional - in Management / Studio / Apps in the user menu
  • forced - the Require two factor box is checked in
    • Management - Tenant creation / edit
    • Studio - Apps user creation / edit
💡
Because the users can only be forced one level lower in the hierarchy the Management user can't be forced to used 2FA

If you want to visualize what was written in this post, please have a look at the following video: