Note: If there are questions on this feature or what authentication applications to use, your IT Department should be the first touchpoint. Bonfire Support will not recommend what third-party tools to use. You can use any authentication tool according to your choice.
What is MFA?
Multi-Factor Authentication (also called Two-Factor Authentication) is an extra layer of security designed to make sure that you're the only one who can access your account even if someone else knows your password. When you sign in for the first time on a new device or the web, you need both your password and the verification code that's automatically displayed on your trusted devices.
To add this feature to your account, navigate to Account Settings > Password then Update to access MFA Settings:
For Agency users, consult with your IT team on the supported authentication applications and check if you can install them on your official/personal devices
For Vendors, consult with your IT team on the supported authentication applications and check if you can install them on your official/personal devices. If you don't have an IT team, please do your research on the tools you can use. Bonfire doesn't recommend any specific applications as our software should generally support all the major applications like Google Authenticator, Microsoft Authenticator, Authy, etc.
Requirements:
- Access to a device (either personal or official depending on your organization's policy)
- Ability to scan QR code on the device, or input set-up key
- Scan the QR Code or type in the setup key on the authentication app of your choice
Setup
Follow the steps in your authenticator application (if any)
- Access Authenticator Application
- Enter the 6-digit code from your authentication application in the Please enter the code from the Authenticator app field
- Click Submit
Recovery Codes
After you complete the setup the MFA screen will look like this:
If you don't want to proceed with MFA, you can disable it using the blue button on the screen
If you wish to use MFA, the immediate next step is to click Generate Recovery Codes. Recovery codes are a set of unique codes. These allow you to regain account access if you cannot access the device or account used for MFA enrollment
Please save them in a safe place, and note that each code may only be used once.
Click on the Enable Recovery Codes. You will get a success message on the screen.
You'll notice that after enabling recovery codes, you can not disable two-factor authentication.
Login using two-factor authentication. You will notice this additional screen the next time you log in.
If you cannot access the authentication app, you can use a recovery code.
If you must disable MFA and cannot do so via your Settings, please contact Euna Procurement Technical Support at support.bonfire@eunasolutions.com.