What is Multi-Factor Authentication?
Multi-Factor Authentication (MFA) is an additional security layer that requires users to provide two or more verification methods to access their account. This security feature helps protect your account even if your password becomes compromised.
How to Enable Multi-Factor Authentication on Your Store
To enable MFA for your store, please contact our support team at support@repspark.com. Our team will work with you to:
1. Determine which user roles should have MFA enabled
2. Configure the appropriate settings for your organization
3. Provide guidance on rolling out MFA to your users
MFA Frequently Asked Questions
User Management and Access
How do users select their MFA method?
Users can choose between multiple authentication methods when setting up MFA. All available options will be presented during the initial setup process.
Can users change their MFA option once set?
No, users cannot change their MFA option independently. However, administrators can reset a user's MFA settings through the User Management Panel if a change is needed.
How are recovery codes handled?
- Users are responsible for safely storing their recovery codes
- Administrators cannot view users' recovery codes
- If a user loses their recovery code, an administrator must reset their MFA settings through the User Management Panel to generate new ones
Administrative Controls
Will MFA be enabled for every user or just admin users?
MFA can be configured based on user roles, allowing organizations to implement different authentication requirements for different types of users.
What MFA management capabilities do administrators have?
Administrators can access the User Management Panel to:
- Reset MFA settings for individual users
- Generate new recovery codes when needed
- Manage MFA configurations based on user roles
Can MFA be restricted to specific authentication methods?
Currently, it is not possible to restrict users to specific MFA options. All available authentication methods will be presented to users during setup.
Technical Specifications
What phone number formats are supported for SMS authentication?
While we support international phone numbers, the current interface has limited formatting guidance. We are working on improving the support for international number formats, though no specific timeline is available.
What security measures are in place for failed MFA attempts?
At present, account lockout and notifications for failed MFA attempts (brute force protection) are not supported features.
Additional Information
For any additional questions or to enable MFA for your store, please contact our support team at support@repspark.com. Our team is ready to assist you with configuration and implementation.