What is Two-Factor-Authentication?

Two-Factor-Authentication (also known as 2-Step verification or 2FA) creates an extra layer of security for your account in case your password is stolen.

With Two-Factor-Authentication you'll need to sign in to your account using:

1. Something you know (your password)
2. Something you have (your Two-Factor-Authentication App or Device)

Sureview Operations uses two-factor authentication using the TOTP (Time-Based One-Time Password) algorithm for user logins.

What do I need?

You'll need an authentication application (usually on your mobile phone). Most OTP compliant applications are compatible with SureView Ops Logins, including but not limited to:

Android
Google | Authy | Duo | AuthAnvil | 1Password | Lastpass | Salesforce | Microsoft | Sophos | Yubikey

iPhone
Google | Authy | Duo | AuthAnvil | 1Password | Lastpass | Salesforce | Microsoft | Sophos | IBM | Yubikey

Windows Phone
Microsoft | Duo | AuthAnvil

Blackberry
Google

Browser / Multi Platform
1Password | LastPass | Bitwarden

Do I need to use 2FA?

No, Two-Factor-Authentication adds an important layer of security to your user account and is recommended for all users but it is (by default) optional.

Organization Administrators however can enforce 2FA requirements for their users.

Setup: First Login

If your users has been set to require Two Factor Authentication, when you first login you will be prompted to set up your Two-Factor-Authentication method.

1. Scan the QR code or manually enter the "Secret" into your 2FA app
2. Enter the Code provided by your app and click "Verify Two-Factor-Authentication"
3. Once verified you'll be prompted to login again with your code

Setup: Manual Add

Even if your administrator hasn't set 2FA to be a required security feature, you can adds it to your own user account by following these steps

1. Log into the system
   
   
2. Click the waffle menu 
   
   
3. Click  'My Account'
   
4. Click Security in the left-hand menu and then Add Two Factor Authentication
   
   
5. Scan the QR code or manually enter the "Secret" into your 2FA app
   
6. Enter the Code provided by your app and click "Verify Two-Factor-Authentication"
   
   
7. Once verified you'll be prompted to login again with your code

Logging in using Two-factor-Authentication

Once you have completed the setup steps, you will now have to use the authenticator on every login. You will be shown the login page as usual and after you have entered your correct login information, you will be asked for an authentication code. Enter the code as it appears on your authenticator and select login.

Changing your Two Factor Authentication

1. Log into the system
   
   
2. Click the waffle menu 
   
   
3. Click  'My Account'
   
   
   
4. Click Security in the left-hand menu and then Update Two Factor Authentication
   
   
5. Enter your existing Two Factor Authentication code and click 'Remove Existing 2FA and Logout'.  You will be prompted to set up a new Two Factor Account on your next login.

Administrator - Enforcing 2FA

If you are an administrator you can configure individual users to "Require Two-Factor Authentication".

1. Go to the User Setup page
2. Add a new user or edit an existing user
3. Check the "Requires Two-Factor Authentication" check box
4. Press Save

Administrator - Resting another user's 2FA

If you are an administrator you can reset individual users 2FA (this can be used if they now longer have access to their authenticator app)

1. Go to the User Setup page
2. Edit the required user
3. Click the "Clear" button
   
4. Confirm the change, then press Save.

I no longer have access to my authenticator app and cannot login - what do I do?

I'm a normal user / Operator

Please speak to your Administrator, they will be able to clear your 2FA. Once complete you'll be prompted to set up a new 2FA code

I'm an Administrator

Please ask another administrator in your team to clear your 2FA. If there are no other administrators (or they have all been locked out) then please contact our support team. We will be able to reset your Two-Factor-Authentication. You will require proof of identity.