General information

With the release of version 6.7, ACMP now supports multi-factor authentication. Setting up multi-factor authentication is initially optional for all users, but the administrator can enforce it for certain user groups. ACMP uses the time-based one-time password (TOTP) method. In addition to the password, users must also enter a six-digit one-time code, typically generated by an authentication application on a mobile device.

The goal of multi-factor authentication is to increase security and protect sensitive data from potential cyber-attacks.

Multi-factor authentication requirements

There are several prerequisites for using this authentication method:

• Make sure that your ACMP console is at least version 6.7. This feature is not available in earlier versions.
• You need an authentication application on your mobile device to perform the verification. ACMP does not provide a solution for this.
• Please use a service that is already pre-installed or recommended in your company (e.g. Google Authenticator or Microsoft Authenticator) and download and install the application yourself.
• Make sure that both the ACMP server and the mobile device are set to the correct time and time zone. The devices need to be synchronised as much as possible as the one-time codes are based on the current time.

Setting up multi-factor authentication

You can set up multi-factor authentification via the Account menu. You can read about the necessary steps for the configuration in the section Manage authentication factors. You can define the necessary group settings via the  User Management.

Continuing steps

If you set up multi-factor authentification for the users of your company, a forced setup for the user may occur. The application example Forced setup of multi-factor authentication for an user provides step-by-step instructions on how to guide the user through this.