How can I manage multi-factor authentication (MFA) settings?

Here, we explain how you can enable the MFA settings on your Medical Tracker account

What is MFA? Multi-factor authentication (MFA) is a security method that requires a user to provide two or more verification steps to access a website or app. In this case, a password and a one-time code.

The MFA add-on will become available once MFA has been enabled on your account. 

This video and guide explain how to enable MFA for users and how it works when they log in. 

Enabling MFA settings

This feature can be managed in the Settings area, in Security settings and Users & Teams. 

In Security settings, you can enable MFA for all users to enforce logging in with an OTP (one-time password) on the account:

Screenshot 2024-10-17 at 13.49.34-1

Please note - if you enable MFA for all users, it means you can't enable MFA for individual users or teams. 

In Users & Teams, there are two ways to enable MFA, either individually or by teams of users.

To enable MFA for an individual user, click on the user email, turn on the MFA toggle in the user settings, and click 'save':

Screenshot 2024-10-17 at 13.50.31Back in the main list of users, you can see who already has MFA enabled with the green label on the left:

Screenshot 2024-10-17 at 13.49.52

MFA can also be enabled for teams. Select a team from 'All Users' in the grey drop-down box. You can then select individual users or the whole team, and under 'Bulk Actions' select 'Enable MFA for selected users':

Screenshot 2024-10-17 at 13.51.57

You can see here that MFA can also be disabled in bulk if needed. 

MFA in action once it's been enabled

Go to the login page (school.medicaltracker.co.uk/login). They log in as normal and a 6-digit code (one-time password) is sent to their email inbox. Copy and paste the code into the box and click 'Continue'.

To make this more convenient for staff, they can select 'Remember this device for 30 days' before clicking 'Continue'. Please note, that this setting will only recognise the device they are currently using. For 30 days, they can log in on the same device without a one-time password. 

Screenshot 2024-10-17 at 13.55.48

If you have any queries regarding this feature, please contact our Support Team by phone (+44 (0) 20 3868 0776, option 1) or email support@medicaltracker.co.uk