Skip to main content
Sign in

Search

Welcome to our Knowledge Base

Multi-Factor Authentication (MFA)

Michaela Doyle
  • Updated

What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication, sometimes called MFA or 2 Factor Authentication, is an additional security measure that can be applied to software systems to confirm a user’s identity. It helps to protect a user’s information from hacking, phishing attempts and stolen or lost passwords.

In Webexpenses the first factor of authentication is a user’s Username and Password. The second factor is obtained via an authentication app.

How to turn on MFA for your company

As an Administrator you can choose to set up MFA at both the Company and Division level. 

  1. Log into Webexpenses as an Administrator
  2. Navigate to Administration in the main menu
  3. Click Company Profile 
  4. Click the Security tab

  5. Select Enable Mandatory Multi-Factor Authentication you will now see a new set of options 

    MFA_ad1.png

MFA_AD_2.png

  1. From this list you can select the user roles that you want to use MFA. You must select at least one role to enable the feature.
  2. Click Save to make the changes. 

 

MFA_ad_3.png

 

 

Ongoing Administration of MFA

As an Administrator you can adjust MFA settings to meet your ongoing security requirements. You can add additional user roles, remove user roles, or turn MFA off if you no longer require this layer of security.

  1. Log into Webexpenses as an Administrator
  2. Navigate to Administration in the main menu
  3. Click Company Profile
  4. Click the Security tab
  5. Change the required setting and click Save.

Administrators can also reset a user’s MFA details if users are struggling to access the system because of lost devices etc.

  1. Log into Webexpenses as an Administrator
  2. Navigate to Administration in the main menu
  3. Click Users
  4. Select the user(s) you want to reset with the check box next to their name
  5. Select the reset option

MFA_Ad4.png

  1. If MFA is setup at a Company or Division level this will force them to go through the MFA configuration process again on their next login. If they have set this up in their own profile this will completely reset their MFA and they will need to reconfigure it in their own settings again.