Multi-factor authentication

Multi-factor authentication (MFA) - sometimes referred to as two-factor authentication (2FA) - is a multi-stage verification method which adds additional layers of security to your account.

When enabled for your Good Grants account, a second verification method using an authenticator app or SMS is required. This means that if someone wants to hack into your account, they not only need to steal your password, they would also need to steal your mobile device.

We recommend enabling MFA for your own account and encouraging your users to do the same.

Enable MFA for my user profile

Enabling multi-factor authentication on your user profile is easy! To add this extra layer of security to your account:

1. Click your name in the top right corner of the page
2. Select Profile from the resulting drop-down
3. Open the 'Security' tab
4. Set the Multi-factor authentication toggle to On
   
5. Follow the configuration steps on the page
6. Save

Enable MFA for a role

You can require multi-factor authentication for specific roles in Good Grants with just a few clicks. This step will make it mandatory for users with that role. To do configure this setting

1. From the Manage workspace, go to Settings > Users > Roles
2. Click on the role you'd like to enable MFA for
3. Select the Require multi-factor authentication checkbox
   
4. Save

Troubleshooting MFA issues

There are a myriad of MFA tools available to your program's users. Each of these utilities is slightly different, but may encounter the same types of issues. These include lost backup codes, syncing problems, authenticator app glitches, or even network connection snags.

Check out the links below to view help documentation created by the most commonly selected providers to help troubleshoot. 

• Google Authenticator support
• Okta end user support
• Microsoft Authenticator FAQ
• OneLogin support

If issues persist, please contact Good Grants support.