Password reset and MFA

Password reset and MFA

The feature allows you to reset passwords and MFA devices to retrieve access information without having to wait for external support.

MFA device reset provides an additional layer of security by allowing users to manage and secure access to their account using multi-factor authentication methods, increasing protection against unauthorized access attempts. 

1. Reset the password

To reset the password, the user will first click on the "Forgot Password" link when trying to log in. At this point, they will be prompted to enter their username. If the account is not a local account, an appropriate error message will be displayed to inform the user that the reset cannot be performed in this manner.

1. In the authentication window, click on Forgot Password
   
2. You will be redirected to a dedicated page that will present a field to enter a verification code. This code will be emailed to the email address associated with your account;
3. Once the code has been entered, fill in the field to create a new password. This new password must meet the security criteria set by the system, ensuring that the account remains protected from unauthorized access attempts. 

2. Set up MFA

To enable two-factor authentication, follow these steps:

1. Click on Edit Profile;
2. Go to the Security Information tab ;
3. Click on Enable Two-Factor Authentication (2FA);
4. A new page will then be displayed, allowing a QR code to be scanned with the user's authenticator app;
   
5. In your authenticator app, click the add + icon;
6. Scan the QR code. 
7. The app will generate a 6-digit code to enter to complete the two-factor authentication activation;
   Email address

   Before this step, make sure that your email address is correctly entered in the User Record -> Email section in order to receive the reset code at the correct address.
8. After logging in again, enter your current username and password, then click Authenticate;
9. A new interface should appear that presents a field to enter the 6-digit validation code, as well as two options: either reset the two-factor authentication or return to the login screen;
10. If you click on the "Reset Two-Factor Authentication" button, a reset code will be sent to your email address;
11. When you enter the code you received and validate, you are taken to an interface where you have to choose from the following options: remove two-factor authentication, reconfigure two-factor authentication, or return to the login screen.