Multi-factor authentication (MFA)
Multi-Factor Authentication (MFA) adds an extra layer of security to your system by introducing an additional login requirement beyond just username and password. With MFA enabled, users will have to enter a verification code any time they want to log in. This code can be sent to their email address or generated by an authenticator app depending on your settings.
Company Admins can enable MFA for all companies for any web-based product. MFA cannot currently be enabled for the parent app or practitioner app.
Enabling multi-factor authentication for your web product
Only Company Admins can enable MFA.
- In the top right, click > Global Settings.
- Go to Security.
- Click on the Multi-Factor Authentication tab.
- Fill out the settings:
- Enable Multi-Factor Authentication: Toggle the button on if you want MFA enabled across all companies.
- Enforcement: Check Off if you want MFA to be optional. If you want MFA to be mandatory for all users, check On from, then select a date: users will have until this date to set up MFA for themselves before it becomes a mandatory requirement to access the system.
- Methods: Select how the users will receive the verification code needed to log in to the system. Choosing Email will send the code to the user's email address. Choosing Authenticator app will generate the code on the user's authenticator app.
- Click Save.
Setting up multi-factor authentication (Email)
- Log on to your eyworks system.
- There should be a pop-up prompting you to set up MFA. Click on Enable Multi-Factor Authentication.
- Alternatively, click on your profile picture in the top right > My Profile, then click on the Multi-Factor Authentication tab.
- Click Configure.
- The field that appears will be automatically filled in with the email address from your profile. This is the email that will receive the verification code.
- Click Enable.
For eylog users who only have practitioner access, it may be better to use MFA with an authenticator app instead of email since the verification code can only be sent to the email of the manager assigned to the practitioner profile.
Setting up multi-factor authentication (Authenticator app)
- Log on to your eyworks system.
- There should be a pop-up prompting you to set up MFA. Click on Enable Multi-Factor Authentication.
- Alternatively, click on your profile picture in the top right > My Profile, then click on the Multi-Factor Authentication tab.
- Click Configure.
- Follow the instructions that appear.
- Enter the Verification Code from the authenticator app into the appropriate field.
- Click Connect.
Logging in with multi-factor authentication
- On your system log-in screen, enter your Email and Password.
- Click Login.
- With MFA, you'll be asked to input a code.
- If you're using Email authentication, the code will be sent to the linked email address. If you don't see the code in your email inbox, you can resend the code after a minute has elapsed.
- If you're using an Authenticator App, you'll find the code in the app.
- Checking Trust this device and don't ask again will make it so you won't have to another code for 30 days on the current device.
- Click Submit.