Multi-factor authentication

= General information =

With the release of version 6.7, ACMP now supports multi-factor authentication. Setting up multi-factor authentication is initially optional for all users, but the administrator can enforce it for certain user groups. ACMP uses the time-based one-time password (TOTP) method. In addition to the password, users must also enter a six-digit one-time code, typically generated by an authentication application on a mobile device.

6

7

The goal of multi-factor authentication is to increase security and protect sensitive data from potential cyber-attacks.

8

9

10

MFA is currently only available for verification at the ACMP Console and not for other applications (ACMP App or AESB).

= **Multi-factor authentication requirements** =

15

16

There are several prerequisites for using this authentication method:

17

18

* Make sure that your ACMP console is at least version 6.7. This feature is not available in earlier versions.

19

* You need an authentication application on your mobile device to perform the verification. ACMP does not provide a solution for this.

20

* Please use a service that is already pre-installed or recommended in your company (e.g. Google Authenticator or Microsoft Authenticator) and download and install the application yourself.

21

* Make sure that both the ACMP server and the mobile device are set to the correct time and time zone. The devices need to be synchronised as much as possible as the one-time codes are based on the current time.

22

23

== Setting up multi-factor authentication ==

24

25

You can set up multi-factor authentification via the Account menu. You can read about the necessary steps for the configuration in the section [[Manage authentication factors>>doc:ACMP.67.Arbeiten mit der ACMP Console.Aufbau der Console.Ribbonleiste.Account-Menü.WebHome||anchor="HAuthentifizierungsfaktorenverwalten"]]. You can define the necessary group settings via the [[User Management>>doc:ACMP.67.ACMP-Solutions.System.Benutzerverwaltung.WebHome]].

26

27

== Continuing steps ==

28

29

If you set up multi-factor authentification for the users of your company, a forced setup for the user may occur. The application example //[[Forced setup of multi-factor authentication for an user>>doc:.Zwangseinrichtung der Multifaktor-Authentifizierung für einen Benutzer.WebHome]] //provides step-by-step instructions on how to guide the user through this.

30

31

author	version	line-number	content
		1	{{aagon.floatingbox/}}
		2
		3	= General information =
		4
		5	With the release of version 6.7, ACMP now supports multi-factor authentication. Setting up multi-factor authentication is initially optional for all users, but the administrator can enforce it for certain user groups. ACMP uses the time-based one-time password (TOTP) method. In addition to the password, users must also enter a six-digit one-time code, typically generated by an authentication application on a mobile device.
		6
		7	The goal of multi-factor authentication is to increase security and protect sensitive data from potential cyber-attacks.
		8
		9	{{aagon.infobox}}
		10	MFA is currently only available for verification at the ACMP Console and not for other applications (ACMP App or AESB).
		11	{{/aagon.infobox}}
		12
		13
		14	= Multi-factor authentication requirements =
		15
		16	There are several prerequisites for using this authentication method:
		17
		18	* Make sure that your ACMP console is at least version 6.7. This feature is not available in earlier versions.
		19	* You need an authentication application on your mobile device to perform the verification. ACMP does not provide a solution for this.
		20	* Please use a service that is already pre-installed or recommended in your company (e.g. Google Authenticator or Microsoft Authenticator) and download and install the application yourself.
		21	* Make sure that both the ACMP server and the mobile device are set to the correct time and time zone. The devices need to be synchronised as much as possible as the one-time codes are based on the current time.
		22
		23	== Setting up multi-factor authentication ==
		24
		25	You can set up multi-factor authentification via the Account menu. You can read about the necessary steps for the configuration in the section [[Manage authentication factors>>doc:ACMP.67.Arbeiten mit der ACMP Console.Aufbau der Console.Ribbonleiste.Account-Menü.WebHome\|\|anchor="HAuthentifizierungsfaktorenverwalten"]]. You can define the necessary group settings via the [[User Management>>doc:ACMP.67.ACMP-Solutions.System.Benutzerverwaltung.WebHome]].
		26
		27	== Continuing steps ==
		28
		29	If you set up multi-factor authentification for the users of your company, a forced setup for the user may occur. The application example //[[Forced setup of multi-factor authentication for an user>>doc:.Zwangseinrichtung der Multifaktor-Authentifizierung für einen Benutzer.WebHome]] //provides step-by-step instructions on how to guide the user through this.
		30
		31

Wiki source code of Multifaktor-Authentifizierung