Overview:

Multifactor Authentication (MFA) adds an extra layer of security when accessing Workbench , making it even more difficult for unauthorized users to gain access.

MFA adds an additional verification step when logging in.

When MFA is enabled by your system administrator on your Workbench instance, each time you log in to Workbench you will require:

• Your Login code

• Password

• One-Time Passcode

This Passcode can be either:

• sent to your email address from the Log-in screen in Workbench or

• you can grab a One-Time Passcode generated from your prefered authenticator app everytime you login. This requires that you configure your prefered autenticator app and add an account for your Workbench instance (steps below).

Screen Guide:

For Users - how to login to Workbench using Multifactor authentication

Once MFA is enabled on your Workbench instance, you will follow these steps on your Workbench login screen you will follow these steps:

1. Enter login code and password as usual

2. Click Login

3. The 'Enter your passcode' screen appears.

   1. Send new Pass code Passcode option:
      Use the Send new passcode option to get a one-time passcode sent to your email address. The email address used will be is the one on your Workbench user. If you user does not have an email address

1. 1. an error messahe will appearindicating so, and you need to contact your System Administrator to addan email address for you.
      

   2. Authenticator app option:
      Once you login for the first time by sending a passcode to your email address, you have the option to configure a second method of getting the one-time passcode. From your Profile (on the top right of ypur screen), navigate to MFA setup menu.

      1. You will need an authenticator app such us Microsoft authenticator or Google authenticator. Donwload it on your phone from your App store or Google play.

      2. From Workbench on your desktop or laptop:

         1. Once you have the authenticator on your mobile phone, open it and scan the QR code on this screen.

         2. Enter the one-time passcode generated by the app and type it back on your Workbench screen to validate and finish the configuration.

         3. Bingo! That is it; your authenticator app is ready for you to get one-time passcodes from it to log in to Workbench.

         4. Next time you login enter your log-in code, password, and on the next screen enter the passcode from your authenticator app. Be quick! it only lasts 1 minute.
            

      3. From Workbench on your mobile device:

         1. Because you cannot use your phone’s camera to scan your screen, you will need to add the Secret Key manually. On the MFA screen tap & copy the Secret Key.

         2. Open your authenticator app and select the option to add an account (Google authenticator: Plus symbol/Enter setup key or on Microsoft Authenticator: Plus symbol/Other/ Enter code manually/Account name is a name to identify your account (Workbench), Secret Key is the key you copied from Workbench).

         3. Tap on the one-time passcode from this new account and paste it back on your Workbench screen to validate and finish the configuration.

         4. Bingo! That is it; your authenticator app is ready for you to get one-time passcodes from it to log in to Workbench.

         5. Next time you login enter your log-in code, password, and on the next screen enter the passcode from your authenticator app. Be quick! it only lasts 1 minute.

Reset MFA token: Once MFA is configured, you will notice an option to reset MFA token displays (Click here to reset MFA token). You can use this if you need to configure your authenticator app again. This will start the process described above again.

If you cannot access your email or your athenticator app at some point, you can contact your system administrator to temporarily disable MFA on your next login session. This is not advisable if your account is a privileged account.

For System Administrators - how to enable Multifactor authentication on Workbench

Next Steps: