Two-factor authentication (2FA)

Overview

Two-factor authentication (2FA) is a common, extra layer of security that you can add to your online accounts. Enabling two-factor authentication means that SimWorkflow will ask for an additional code, in addition to email and password, when authenticating.

This code will be generated by an authentication app (e.g. Duo, Authy, Microsoft Authenticator) that you can install on your phone.

To ensure that you can securely access your account even without your mobile device, SimWorkflow also provides recovery codes for download.

Enable two-factor authentication

We recommend that all SimWorkflow user account holders enable 2FA to keep their accounts secure.

To enable two-factor authentication for your SimWorkflow login:

1. Log in to the SimWorkflow.

2. Navigate to your Settings.

3. Select the Two-factor authentication menu.

4. Configure an authentication mobile app to enable 2FA on your account.

Reconfigure two-factor authentication

You may need to reconfigure your mobile app authentication if you join a new organization or lose access to your mobile device. When you reconfigure your mobile app authentication, your previous TOTP codes are invalid. 

Reconfiguring mobile app authentication does not turn off 2FA.

To reconfigure, follow the same Steps 1-4 as detailed above.

Regenerate recovery codes

Each recovery code is one-time use only, but you can always request a new set of recovery codes. This is useful if you have lost access to or used all of your previous recovery codes.

Regenerating your recovery codes will invalidate your previous codes.

To regenerate recovery codes, 

1. Log in to SimWorkflow.

2. Navigate to your Settings.

3. Select the Two-factor authentication menu.

4. Under Recovery codes section, click Regenerate to generate and save a new set of two-factor recovery codes.

Disable two-factor authentication

To disable 2FA:

1. Log in to SimWorkflow.

2. Navigate to your Settings.

3. Select the Two-factor authentication menu.

4. Click Disable link. A confirmation page appears.

5. Enter your the confirmation text, then click Disable.