Configure your MFA

How to configure MFA ?

Multi-factor authentication (MFA) is an essential security measure to reinforce the protection of user accounts on the platform. Once you have activated MFA, we recommend that you configure your policy so that it can be proposed or imposed on your users (employees and/or applicants).

Only the Owner and Platform Admins can configure the MFA policy.

Please refer to this article : Enabling MFA on the platform

To enable this feature, please follow the steps below :

From the administrator area, click on the “Security” menu, then on the “Configure MFA” button.

MFA activation can be configured for each role on the platform (admin, employee, candidate).

You can decide whether to activate it for all user accounts or only for certain roles.

To enable MFA for admin accounts, simply activate the option for "Admin" This means that all accounts with the "Admin" role will have to add an additional authentication factor to their login details (e-mail address and password) to access their interface.

To activate MFA for collaborator accounts, simply activate the option for "Collaborators"

You will need to specify the workgroup(s) concerned (Managers, Assessors, Observers) by ticking the corresponding box in front of each group.

In our example, we have activated only the Manager group. This means that, in addition to their login details (e-mail address and password), all collaborators with the "Manager" workgroup will have to add an additional authentication factor to access their interface.

To activate MFA for candidate accounts, simply activate the option for "Candidates"

This means that all candidates will have to add an additional authentication factor to their login details (e-mail address and password) in order to access their interface.

Set MFA activation deadline

Before this date, users can ignore activation and connect without MFA. Once the activation deadline has passed, MFA activation becomes mandatory to log in.

Without activation deadline → MFA optional
With configured activation deadline → MFA mandatory after this date

Once you have completed your configuration, click on the “Save” button to save your changes.

If you have not set an activation deadline, you will receive a confirmation message after saving to confirm that without this date, MFA will never be imposed on selected accounts, but will always be offered randomly and without obligation.

Once the configuration is complete, you can find the details of the MFA policy in the “MFA” menu.

You can modify the MFA policy at any time by clicking on the “Configure policy” button again (modify the accounts concerned, the activation deadline).