How to secure your account with MFA (Multi-factor authentication)?
Multi-factor authentication (MFA) adds an extra layer of security for your account. Kiflo supports MFA using authenticator apps (Google Authenticator, Proton Authenticator, etc).
Global settings
MFA is a global setting. When you enable MFA for your user, it is enabled for all accounts you have access to (all partner portals or vendor portals).
Enable MFA
Sign in to your account, then:
- Click on the top-right menu
- Select User Preferences
- Then click on Security
If MFA is not enabled, click on the Configure button:
Open your authenticator app and scan the QR code:
Enter the code generated by your authenticator app:
If the code is correct, you will be signed out automatically, and you'll have to sign in again using MFA.
When MFA is required by an organization
An organization can decide that MFA is mandatory for everyone who accesses its workspace. If that applies to you and you have not set MFA up yet, a Set up multi-factor authentication screen appears when you sign in, when you switch into that workspace, or shortly after the requirement is turned on if you are already signed in. This screen cannot be dismissed, and it contains the same QR code and confirmation steps as above. Once you complete it, you get access immediately.
Why can't I disable MFA?
Because MFA follows your user and not a single workspace, you cannot turn it off while any of the workspaces you can access still require it. The Disable button is greyed out in that case, and hovering it shows One or more of your workspaces requires MFA.
If you no longer want MFA on your account, ask the admins of those workspaces to stop requiring it. Once none of them does, the Disable button becomes available again.