Goal: Enhancing account security with multi-factor authentication (MFA) for email login users through verification code support
Features & Capabilities
Chronus Support/CX will enable MFA for email login users via a security setting. Please reach out to your Chronus Customer Success Manager to enable this setting.
The functionality is available at two levels: Only for admins or All users including admins.
This functionality is applicable only to users who login via email/password authentication and not applicable to SSO users.
MFA not applicable for new signups or registration scenarios.
End User Experience
Once MFA is enabled, the subsequent login will prompt users to enter a verification code sent to their email post successful email/password authentication.
A verification code will be sent via email to the users which they have to enter here to login successfully. The verification code would be valid for 5 minutes.
An option to “Trust the device for 30 days” is provided, which if checked prevents verification code check for the next 30 days. Note: If the user logins from a different device, then verification code will be prompted.
If the user has not received the verification code, the option to Resend code would be available in increasing time frame until 4 attempts at a time. Users are allowed to retry multiple times during the day with a specific threshold.
Once they reach 10 failed attempts, their account would be locked. They either have to wait for 24 hours to unlock or reach out to admins to unblock them.
Global Admins will be provided with the list of account blocked users whom they can manually scrutinize and unblock.
Release Certification: This release has undergone rigorous testing phases to ensure its reliability and efficacy, particularly concerning the purpose assessment capability. We are proud to report that the release has been thoroughly tested and certified by Chronus. This certification signifies our unwavering commitment to maintaining the highest standards of quality for our users.