Introduction

Found under the Setup menu and Security, the Authentification tab contains the list of  Multi-Factor Authentication (MFA) settings used for the ledger. 

Multi-factor authentication creates an additional layer of security on top of the username and password before a user can access INSIGHT. 

After a user enters their username and password, an email with a code is automatically sent to the email address recorded for the user. The code must be entered into INSIGHT to allow access to the ledger. The Authentication tab contains the settings used to customise how the code is managed.

Settings

The Authentification tab displays the list of settings and how they are currently set up. Select Edit to make any changes to the settings. 

	Site IP Address Restriction - IP Addresses and/or Country Codes entered here will be the ONLY IP Addresses and/or Country Codes allowed to access the ledger.
	Enable Multi-Factor Authentication - enables or disables the MFA feature.
	Multi-Factor Authentication Code Valid for Minutes - defines how many minutes the emailed code is valid for.
	Multi-Factor Authentication Max Code Resend - defines the maximum amount of times a code is resent to a user.
	Multi-Factor Authentication Max Code Resend Minutes - defines how many minutes until a code can be re-sent
	Multi-Factor Authentication Remember Browser Enable Days - refers to how many days the browser you're using will remember the MFA code so that you don't need to have a new MFA code when you've logged out and logged back in.
	Multi-Factor Authentication Whitelist IpAddress - defines which IP Addresses are exempt from using MFA. For example, you can enter your office IP address in this setting if you don't require MFA for staff logging in from your office.