Multi Factor Authentication (MFA) is a common way of providing an additional level of security for applications, because it requires at least two unique pieces of information for a user to sign in. One of these pieces of information is a random, single-use code generated by an authenticator application. The code expires and a new one is generated frequently (e.g. every 30 seconds).
ESS works with many commonly used authenticator apps. If employees already use an authenticator app, you should be able to register it for ESS. If employees don't already have an app or want to use a different one, they will need to download and install the app as part of the setup process, which they will use once enabled.
If you don't have an app and don't know where to start, we've provided some suggested apps in the ESS Register your app page:
Google Authenticator
Microsoft Authenticator
Okta Verify
Download the following document for information on Multi Factor Authentication for Employee Self-Service, including how employees can register for MFA, use MFA and how Administrators or Managers can unlock members.
Note: MFA will not show as enabled in the front end of ESS until MFA has been enabled for all users.
To enable MFA for your tenant:
Contact support via MyAccess to request MFA be enabled for ESS.
Communicate to your employees that MFA will be enabled, and that they should all log into ESS before ensuring that they know their passwords. This makes for a smooth setup process.
Refer to the attached document for instructions for employees to set up and register for MFA once enabled.