Multi-factor Authentication (MFA)

CyberSystem offers three options for authenticating users' access to your organisation within CyberSystem:

• Username and Password
• Username/Password + Security Key
• Username/Password + Authenticator App

Setting your organisation's MFA requirements

There are two places where an organisation can set the requirements for MFA on login.

From the Settings > Organisation > Details page:

And on a per role basis from the Settings > Team > Roles > Manage Role page. Note that the role-based setting is only applicable if the organisation wide setting is off. 

Registering a MFA

When a user logs in for the first time, or for the first time after one of the MFA Required settings above has been turned on, they will be prompted with the following before being allowed into CyberSystem:

Authenticator App (Time-based one time password)

This option allows you to register an authenticator app or extension. Scan the QA code, then provide the six-digit code that is generated by your authenticator app.  

Registering a Security key 

When you press the "Setup a Security Key" button, you will be prompted by your browser, OS or password manager to continue the registration process. 

Resetting a lost MFA

For security reasons, we do not allow users to change or update their own MFA if it has been lost. To reset the MFA process you will need to go to the Settings > Team > Members page, find the user, and choose the "Reset MFA" option from their menu.