SystemConfigure Two-Factor Authentication

Two-factor authentication (2FA) adds an extra layer of security to Loftware Enterprise SP administrator accounts, requiring two forms of identification to sign in to Loftware Enterprise SP. After 2FA is enabled, the user must enter their password as well as a code from an authenticator app to sign in to Loftware Enterprise SP.

Configuring 2FA involves enabling the option in System System Management and then setting up an authenticator app for Loftware Enterprise SP. To disable 2FA, see Disable Two-Factor Authentication. For troubleshooting help, see Troubleshoot Two-Factor Authentication.

Important: You cannot perform the following tasks when 2FA is enabled for your account: add or remove additional servers in a distributed services environment, transfer data from one Loftware Enterprise SP instance to another, install a new driver, or install Loftware Enterprise SP Business Intelligence. To perform these tasks, disable 2FA for your account and enable it again after the task is complete, if desired.

Enable Two-Factor Authentication

Use the following procedure to enable 2FA for the SuperAdmin, SystemAdmin, or ClientAdmin users.

Note: To perform this task, you must be signed in as the ClientAdmin, SystemAdmin, or SuperAdmin user. For more information, see Controlling Access to System Settings

  1. In System System Management, click System Administration.
  2. In the Authentication Rules panel, select the Enable Two-Factor Authentication checkbox next to the user or users you want to enable 2FA for.
  3. Click Save. 2FA will now be required for the user(s) the next time they sign in to Loftware Enterprise SP.
  4. Continue with Configure an Authenticator App.

Configure an Authenticator App

After 2FA is enabled, the administrator user(s) should use following procedure to set up an authenticator app with Loftware Enterprise SP.

  1. Open Loftware Enterprise SP from a supported browser. The sign in page is displayed.
  2. Enter your Username and Password.
  3. Click Sign in. The Configure Two-Factor Authentication dialog box is displayed.
  4. Write down or copy the Secret Key displayed in the dialog box and save it in a secure and private location. You will need this key to configure additional devices for 2FA or to recover the authentication account if the initial mobile device is not available. For more information, see Troubleshoot Two-Factor Authentication.
  5. On your mobile device, download an authenticator app such as Microsoft Authenticator or Google Authenticator.
  6. In the authenticator app, add a new account and select the Scan QR code option.
  7. Using your mobile device, scan the QR code displayed in the Configure Two-Factor Authentication dialog box.
  8. In Loftware Enterprise SP, click OK to close the dialog box.
  9. Continue with Sign in with Two-Factor Authentication.

Sign in with Two-Factor Authentication

The administrator user(s) should use following procedure to sign in to Loftware Enterprise SP after 2FA is enabled and they have already configured an authenticator app for Loftware Enterprise SP.

  1. Open Loftware Enterprise SP from a supported browser. The sign in page is displayed.
  2. Enter your Username and Password and click Sign in.
  3. Open the authenticator app on your mobile device and select the Loftware Enterprise SP account.
  4. In Loftware Enterprise SP, enter your Password again.
  5. Enter the code from the authenticator app in the Two-Factor Authentication Code field. The code regenerates every 30 seconds.
  6. Click Sign in.