Frequently asked questions – MFA
Multi-Factor Authentication (MFA) is an additional security layer designed to protect your information from unauthorized access. This Frequently asked questions section aims to clear up common MFA-related doubts by providing helpful information to system users and administrators.
1. Why is MFA required for cloud customers?
SoftExpert prioritizes its customers' data security by investing in specialized consulting and resources to mitigate vulnerabilities. Increased user credential leaks has led to the implementation of MFA, ensuring additional protection for confidential data.
2. Can I use the same e-mail address for different users?
No, the system does not allow the same e-mail to be used by more than one person. Each user must have a unique e-mail address to guarantee data integrity and prevent login conflicts.
3. Can I use an employee's personal e-mail address?
Yes, it is possible to use one's personal e-mail address, provided that it is valid and exclusive to each user.
4. I have SSO set up. Do I need to do anything?
If Single Sign-On (SSO) is set up, it is not necessary to enable MFA, as SSO offers enough security when authenticating users.
5. Product installed on the customer's own servers, without SSO set up. What is the impact of not activating MFA?
There will be no impact, but the MFA feature in version 2.2.0 offers a more robust authentication and boosts system access security.
6. How can I check if I have MFA or SSO set up?
Refer to our system documentation or contact the technical support for specific guidance.
In the case of SSO, you can access the documentation related to this feature through the following link: Documentation on using SSO in SoftExpert Suite; for MFA documentation, you can access this link: Documentation on using MFA in SoftExpert Suite.
7. I use authentication via LDAP. Do I need to do anything?
Users with LDAP authentication will be asked to provide an MFA token, regardless of other factors.
8. Is it possible to set up MFA in a test environment?
MFA is available from version 2.2.0. We recommend updating SoftExpert Suite before testing this feature.
9. Do employees outside the company's domain need an e-mail address?
Only users who want to log in need an e-mail address. For other cases, it is not mandatory; however, using one is recommended.
10. Will external users be impacted by MFA?
Yes, both internal and external users will be affected by MFA (Multi-Factor Authentication), as they will be required to insert an access token.