Storm season is back, bringing with it the potential for significant weather events. If you have clients in areas prone to infrastructure disruption, visit the Disaster Recovery Resources guide for preparedness information. Datto recommends performing proactive disaster recovery testing to mitigate potential downtime. See our articles about the importance of disaster recovery testing and Preparing For A Cloud Virtualization Test: Policies, Procedures, And Partner Responsibilities to learn more. For live updates, follow @datto on Twitter.

How Do I Enable Two-Factor Authentication For My Employees?

Follow

Topic

How do I set up two-factor authentication for my employees?

Environment

  • Two-Factor Authentication
  • Datto Partner Portal

Description

Two-factor authentication requires that each of your employees with permission to access your firm's Partner Portal account have an associated mobile phone number. Employees authenticate via their phones.

Enabling Two-Factor Authentication

To enable two-factor authentication, you must include a mobile phone number in every employee profile. 

1. In the Partner Portal, click the Admin tab and select Manage Employees from the drop-down menu.

Figure 1: Partner Portal → Manage Employees (click to enlarge)

2. Select Yes for the option to enable two-factor authentication for your partner account (this option will not succeed if any of your employees do not have a mobile phone number recorded in their profile). 

Figure 2: Enable two-factor authentication (click to enlarge)

Setting up for authentication

To start using two-factor authentication, both the admin and the employee must take action:

Employees: Each employee should download and set up the Authy app on the mobile device associated with their phone number. Authy is available for free for Windows, Mac, Chrome, iOS, and Android.

Admin: Each employee profile must have a mobile phone number on record. To edit an employee's profile:

1. On the Manage Employees page, click the pencil icon to open the Edit Employee window.

Figure 3: The Edit Employee icon (click to enlarge)

2. Enter the employee's mobile phone number as a continuous number. Do not use spaces, punctuation marks or dashes. When finished, click the Save Changes button.

Figure 4: The Edit Employee screen (click to enlarge)

The mobile phone number is now part of the employee profile. 

Figure 5: The Manage Employees screen with mobile phone number (click to enlarge)

Authenticating

When logging into the Partner Portal, employees will be prompted to enter an authentication key.

Figure 6: Two-factor authentication prompt (click to enlarge)

At this point, the tech must authenticate via ANY ONE of the following options:

  • Authy OneTouch. Entering credentials into the Partner Portal triggers an alert in the Authy app on the tech's mobile device. Swiping the alert completes the authentication.
  • Request the portal to send an SMS token to the relevant phone number. Enter the key in the Token or Security Key field, then click Sign In to complete the authentication.

Lost phones

If you lose your phone, you can continue accessing your Partner Portal account after performing a 2-factor authentication reset or resetting your phone number once you have a new one.

  • If you have the same phone number as before, you only have to reinstall the Authy app to regain access.
  • If your phone number has changed, go to https://www.authy.com/phones/change to reset your number. Click the I don’t have access to my phone button at the bottom of the screen to get started. Once submitted, the process can take up to 72 hours to complete.
  • Consider installing Authy on multiple devices that use the same phone number (e.g., iPhone and iPad).

 


Was this article helpful?

2 out of 4 found this helpful

You must sign in before voting on this article.

Calling all Partners! We want to hear your feedback! Please participate in this quick survey and help us build a better, more-relevant Knowledge Base!

Want to talk about it? Head on over to our Community Forum!