Multi-Factor Authentication: SMS-Based MFAs

With this new feature, employees will no longer worry about the security of their information in Sprout HR!

Multi-Factor Authentication (MFA) is a method wherein a user is only granted access to a website or application, in this case, Sprout HR, after successfully getting validated using two factors or evidence.

It is an added security that prevents any unknown person from accessing the user's data.

Terminologies:

• 2FA - two-factor authentication
• OTP - one-time password; a randomly generated and constantly refreshing code
• Third-party authenticator app - enables 2FA authentication by showing a randomly generated code for the user to use and confirm his identity

Two Factor Authentication (2FA)

Two-factor authentication or 2FA is a type of multi-factor authentication. In 2FA, the user’s claimed identity is confirmed using a combination of two different factors using a third-party authenticator (See Multi-Factor Authentication):

• The first factor is your password, which is standard for any account
• The second factor is a one-time password (OTP) sent to the user’s registered primary mobile number which continuously refreshes.

We can also configure the settings to identify which dashboard automatically has access to MFA:

• Admin only
• Admin and Managers only
• All employees

Logging in 

1. Specify your credentials and click Login.
   
   
   The page refreshes and the OTP page is displayed. The OTP SMS is sent to your registered primary number. 
   
   
   
   
2.  In the OTP field, specify the received 5-digit code.
   
   
3. Click Verify. The Sprout HR dashboard is displayed. If you are logging in for the first time, you need to agree to the terms and conditions and privacy policy agreement before reaching the Sprout HR Dashboard.

Frequently Asked Questions (FAQs)

• Why am I not getting the OTP SMS?
  • The OTP SMS is sent to your registered primary contact number. Verify whether the data on record is correct. Contact your HR administrator to update your information.
  • You might be experiencing a bad signal reception. Wait for up to 5 minutes before attempting to generate a new OTP.
    
• Can I generate a new OTP even if the last code has not yet expired?
  • Yes, you have a maximum of 5 OTP generations.

Related Articles:

• • SMS-Based MFAs: Validity of OTP
  • SMS-Based MFAs: Requesting of OTP

Should you wish to enable this feature, you may reach out to your Customer Success Manager or fill out our Change Request Form. I hope this helps! If you have further questions or concerns, please let us know by sending an email to [e-mail]! We'd love to hear from you.