Two Factor Authentication - Initial Setup

These steps apply to basic two-factor authentication using the Acumatica mobile app, email or SMS.  Different instructions are required if setting up advanced authentication using Azure Active Directory or Google.

1. Navigate to Security Preferences
2. Turn on Two-Factor Authentication
3. Set it to Required and Save.

4. A confirmation window will appear. The system will email a verification code to the email address of the user currently logged in.

• • • Make sure this email address is valid.
    • If the email is not received, check the All Emails screen to find the code.

5. Enter the verification code in the confirmation window.
6. Select Generate List of Access Codes to create a file with backup login codes.
   • • These codes can be used when locked out of the system.
     • Store this file in a secure location.

7. Once enabled, all users will be required to use 2FA immediately.

• • • To exclude a specific user, open their user record on the Users screen, check Override Security Preferences and set the option to None.

8.  Users can choose one of the following login methods. Provide the appropriate instructions, available in separate guides, to each user based on their selection option:
   • • Mobile app with push notification (Ensure the Acumatica mobile app is setup before step 3 is marked as active.)
     • Email verification code sent to the email address on the user’s Acumatica account
     • SMS text message with verification code (This option requires a third-party application to be connected with Acumatica, such as Twilio or Amazon SMS)