Enable multi-factor authentication

Turn on multi-factor authentication for a user or for every user of an account, and sign in to Azion Console with an authenticator code.

Last updated

View as Markdown Agent setup

You can turn on multi-factor authentication (MFA) for one user or for every user of an account from Azion Console. With MFA on, a user signs in with a password and a six-digit code from an authenticator application. To regain access after you lose the device that runs the authenticator, refer to Troubleshoot Azion Console sign-in.

Prerequisites

  • Access to Azion Console as an Account owner. To sign in, refer to Access Azion Console.
  • An authenticator application on a mobile phone for each user who turns on MFA, such as Google Authenticator or Microsoft Authenticator. Install it from the app store of the phone’s operating system.

Turn on MFA for one user

An Account owner turns on MFA for any user of the account, including their own user, in Users Management.

To turn on MFA for a user in Azion Console:

Open Users Management

Access Azion Console and, in the account menu, select Users Management.

Select the user
Turn on MFA

In the Security Settings section, turn on Enforce Multi-Factor Authentication.

Select Save

The next time the user signs in, Azion Console opens the MFA setup page.

Require MFA for every user of the account

The account setting makes MFA mandatory for all users linked to the account. While it is on, an Account owner cannot turn off MFA for a single user.

To require MFA for every user in Azion Console:

Open Account Settings

Access Azion Console and, in the account menu, select Account Settings.

Turn on the enforcement

In the Login Settings section, turn on Enforce Multi-Factor Authentication.

Select Save

Every user linked to the account must set up MFA at their next sign-in. To stop the enforcement, turn off Enforce Multi-Factor Authentication in the same section and select Save.

Connect the authenticator application

The MFA setup page shows a QR code at the first sign-in after MFA is turned on. The authenticator application reads it and starts to generate six-digit codes for your Azion user.

To connect the authenticator application:

  1. In the authenticator application, select +.
  2. Select the account type to add. The camera of the phone starts.
  3. Scan the QR code on the MFA setup page.
  4. On the MFA setup page, enter the six-digit code and select Verify code.

Azion Console signs you in. From now on, each sign-in asks for a code from the same phone.

Sign in with MFA

To sign in to Azion Console with MFA on:

  1. On the sign-in page of Azion Console, enter your email and password, and select Sign In.
  2. Open the authenticator application on your phone.
  3. In Azion Console, enter the six-digit code and select Verify.

Azion Console opens after the code is verified.

Turn off MFA for one user

A user who loses the phone that runs the authenticator cannot sign in until an Account owner turns off their MFA. The Account owner can do it only when Enforce Multi-Factor Authentication is off in Account Settings.

To turn off MFA for a user in Azion Console:

Open Users Management

Access Azion Console and, in the account menu, select Users Management.

Select the user
Turn off MFA

In the Security Settings section, turn off Enforce Multi-Factor Authentication.

Select Save

The user signs in with email and password only. When the locked-out user is the only Account owner of the account, Azion Support resets the MFA. To contact it, refer to Open a support ticket.

Next steps

Manage usersAdd users to the account and set who is an Account owner.Configure Account Lockout PolicyLock a user after repeated failed sign-in attempts.Troubleshoot Azion Console sign-inRegain access after you lose the MFA device.Multi-factor authenticationRead how MFA protects the sign-in to an account.