Multi-Factor Authentication (MFA)
Where to find it: Account Preferences - Authentication- Multi-Factor Authentication
To give our customers even more protection against unauthorized access, we offer the option of enabling multi-factor authentication (MFA) in your Employee Referrals company account. MFA allows you to use another security feature in addition to a password when logging in.
Engage MFA for specific user groups
To activate MFA for specific user groups, login to your Employee Referrals company account and go to "Account Preferences" - "Authentication" - "Multi-Factor Authentication".
You can now specify for which user role MFA should be activated as an additional security level. Once you select one of the boxes and click "Save", every user that has this particular role within Employee Referrals will then be asked to set up "MFA" for their Employee Referrals account.
In order to use MFA, the users need an "Authenticator App"(Google Authenticator)on their smartphones. This app generates the required "key/number code" as an additional security feature to the selected password.
Disable MFA for single Users
As an administrator of your Employee Referrals company account, you have the option to deactivate the MFA for single users. To do so, go to "Account Preferences" - "User Management" and click on the "3 points" on the far right of the specific user you wish to deactivate it for. If the user has MFA enabled, you will be able to disable it here.
If you remove the checkmark for the specific user group under "Multi-Factor Authentication", this will have no effect on users who have already configured MFA. MFA can only be deactivated for individual users in "User Management".
Why is there a function for disabling MFA for individual users?
In connection with MFA, a user will need a number-code to log in, which is generated by an authenticator app on a smartphone. If a Talent Scout is no longer in the possession of a smartphone (for example due to theft, loss or purchase), you can disable (as an administrator) MFA for this specific user.
The user will then be able to log into their Employee Referrals account with their chosen password and can reactivate the MFA function on their new smartphone. This process is necessary because the original authenticator app (on the old smartphone) has a secret key stored. Once you have a new smartphone and the authenticator app installed, a new key for Employee Referrals will be generated.