Enable multi-factor authentication

You can turn on multi-factor authentication (MFA) for one user or for every user of an account from Azion Console. With MFA on, a user signs in with a password and a six-digit code from an authenticator application. To regain access after you lose the device that runs the authenticator, refer to Troubleshoot Azion Console sign-in.

Prerequisites

Access to Azion Console as an Account owner. To sign in, refer to Access Azion Console.
An authenticator application on a mobile phone for each user who turns on MFA, such as Google Authenticator or Microsoft Authenticator. Install it from the app store of the phone’s operating system.

Turn on MFA for one user

An Account owner turns on MFA for any user of the account, including their own user, in Users Management.

To turn on MFA for a user in Azion Console:

Open Users Management

Access Azion Console and, in the account menu, select Users Management.

Select the user

Turn on MFA

In the Security Settings section, turn on Enforce Multi-Factor Authentication.

Select Save

The next time the user signs in, Azion Console opens the MFA setup page.

Require MFA for every user of the account

The account setting makes MFA mandatory for all users linked to the account. While it is on, an Account owner cannot turn off MFA for a single user.

To require MFA for every user in Azion Console:

Open Account Settings

Access Azion Console and, in the account menu, select Account Settings.

Turn on the enforcement

In the Login Settings section, turn on Enforce Multi-Factor Authentication.

Select Save

Every user linked to the account must set up MFA at their next sign-in. To stop the enforcement, turn off Enforce Multi-Factor Authentication in the same section and select Save.

Connect the authenticator application

The MFA setup page shows a QR code at the first sign-in after MFA is turned on. The authenticator application reads it and starts to generate six-digit codes for your Azion user.

To connect the authenticator application:

In the authenticator application, select +.
Select the account type to add. The camera of the phone starts.
Scan the QR code on the MFA setup page.
On the MFA setup page, enter the six-digit code and select Verify code.

Azion Console signs you in. From now on, each sign-in asks for a code from the same phone.

To sign in to Azion Console with MFA on:

On the sign-in page of Azion Console, enter your email and password, and select Sign In.
Open the authenticator application on your phone.
In Azion Console, enter the six-digit code and select Verify.

Azion Console opens after the code is verified.

Reset the MFA of a user

A user who loses the phone that runs the authenticator cannot sign in. An Account owner deletes the MFA of the user in Multi-Factor Authentication Management, so the user can set up MFA again on a new phone.

To reset the MFA of a user in Azion Console:

Open Account Settings

Access Azion Console and, in the account menu, select Account Settings.

Open Multi-Factor Authentication Management

In the Login Settings section, select Multi-Factor Authentication Management.

Delete the MFA of the user

In the row of the user, select Delete.

Confirm the deletion

In the Delete MFA dialog, type the confirmation text that the dialog shows and select Delete.

Azion Console shows MFA successfully deleted.

At the next sign-in of the user, Azion Console opens the MFA setup page. To connect the authenticator application on the new phone, refer to Connect the authenticator application. When the locked-out user is the only Account owner of the account, Azion Support resets the MFA. To contact it, refer to Open a support ticket.

Turn off MFA for one user

An Account owner turns off MFA for one user in Users Management. The Account owner can do it only when Enforce Multi-Factor Authentication is off in Account Settings. To restore the sign-in of a user who lost the phone, refer to Reset the MFA of a user.

To turn off MFA for a user in Azion Console:

Open Users Management

Access Azion Console and, in the account menu, select Users Management.

Select the user

Turn off MFA

In the Security Settings section, turn off Enforce Multi-Factor Authentication.

Select Save

The user signs in with email and password only.

Next steps

Manage usersAdd users to the account and set who is an Account owner.Configure Account Lockout PolicyLock a user after repeated failed sign-in attempts.Troubleshoot Azion Console sign-inRegain access after you lose the MFA device.Multi-factor authenticationRead how MFA protects the sign-in to an account.