Two-Factor Authentication

Rosterfy allows for users to increase the security of their accounts with Two-Factor Authentication.

 


Two-Factor Authentication

Two-factor authentication (2FA) is an identity and access management security method that requires two forms of identification to access resources and data. 2FA, also known as Multi-Factor Authentication adds a second level of security to your Rosterfy account.

Rosterfy recommends all users to have 2FA to add an additional layer of security.

 


What is Required to use 2FA?

To use 2FA with your Rosterfy account, you will need to have access to an 2FA manager, such as Google Authenticator (on iOSAndroid) or Authy

These tools provide a single use token valid for 30 seconds, which is required when you login to Rosterfy on a new device. 

Note: If you add 2FA to your Rosterfy account and then lose the device with the 2FA token, you will need to contact Rosterfy support to recover your account.

This process can take over 48 hours to complete.

 


Setting up Two-Factor Authentication

To set up 2FA on your Rosterfy account, follow these simple instructions:

  1. Navigate to your Settings in the top right corner of the admin console, select Settings.

    Image of the Settings options.
  2. On the Security tab, Two-Factor Authentication is shown. Click Attach Google Authenticator.

    Image of the Security Tab.
  3. A pop up will appear with a QR code for you to scan or a Key for you to enter into your 2FA manager.
  4. Enter the Authenticator Code into the pop up screen from your 2FA manager and click Attach.
  5. Once successfully attached, a success message will temporarily appear. From now on you will be required to enter an 2FA token on login.

 


Removing Two-Factor Authentication

To remove 2FA from your account, follow these simple steps:

  1. Navigate to your Settings in the top right corner of the admin console, select Settings.

    Image of the Settings
  2. On the Security tab, Two-Factor Authentication is shown. Click Detach Google Authenticator.

    Image of the Security tab
  3. A pop up will appear, you will need to enter the authentication code from your 2FA manager to remove the 2FA.

    Image of the Detach 2FA
  4. Once successfully removed, a success message will temporarily appear and you will be returned to the Security tab.

 


Admin Access to 2FA

As an admin you can view a users profile and will be able to see a 2FA enabled flag on their profile. 

Image of the 2FA flag.

To remove 2FA from a users account, follow these simple instructions:

  1. Navigate to the users profile.
  2. Click Actions > Remove 2FA.

    Image of the Remove 2FA option.
  3. You will be prompted to confirm that you wish to remove the authenticator, select Yes.
  4. Once successful, a success message will temporarily appear in the top right corner to confirm 2FA has been removed from this users profile.