Multi-factor Authentication (MFA)
As an extra layer of security, MFA may be enabled on a SmartyGrants Account. This can be enabled by an administrator for all users in an account, or by an individual user for their user account only. When MFA is enabled, an authenticator mobile app (such as Google Authenticator or Authy) will be required each time they log in.
By default, MFA is set to ‘Optional for everyone’. With the default setting enabled, individual users will be able to configure MFA for their own accounts.
Warning: If MFA is set to required for all users for one instance, users who have access to multiple instances will be required to set up MFA to access all their instances.
Enable MFA
Enable MFA for all users
Administrators can configure the SmartyGrants account to require MFA be used for all users who have been added to the account. To enable MFA for all users:
Select the Settings icon.
Select MFA Setup.
Select Required for everyone.
Enable MFA for a single user
Navigate to the My Account page.
Select Enable Multi-Factor Authentification.
Note: Users can only enable MFA on their individual user account if the Account level MFA Setup setting is set to 'Optional for everyone'.
When MFA is enabled, either for an individual user or all users, when the user next attempts to login at https://manage.smartygrants.com.au / https://manage.smartygrants.co.uk, they will be presented with the following screen:
Once initial activation is complete, users will be presented with the following screen upon every login:
MFA and SmartyFile
Users who are also a member of a SmartyFile Organisation with MFA enabled who are required to use MFA when logging in to their ‘manage’ account will be automatically use the existing authenticator app configured on the SmartyFile account.
MFA and Single Sign On (SSO)
If you access SmartyGrants via your organisation’s Single Sign On protocols (for example, an SSO login URL similar to https://manage.smartygrants.com.au/login/sso?domain=ssoexample.com), SmartyGrants MFA is not available. However, MFA may still be in place via your organisation’s SSO implementation.
Reset a User’s MFA
A user may require the MFA to be reset, for example if they have lost the device their authenticator application was installed on.
To reset the MFA for a user’s account and Administrator can:
Select the Settings icon.
Select User Access.
Select the User’s name.
Select Reset MFA.
Confirm the MFA reset by selecting Confirm.
