Fullscreen Image

Multi-Factor Authentication (MFA)

Create a new user and invite them to set up multi-factor authentication (MFA), or invite an existing user to use MFA. Use MFA to add an extra layer of security for external users who can’t use your organization’s Single Sign-On (SSO). Only Administrators can enable MFA for external users.

After you create an MFA user or invite an existing user to use MFA, the user account is locked for changes. To update the account, clear Is MFA User?, make your changes, and then select Is MFA User? again.

Set up MFA users for Auth0 or Accruent Central Auth.

Auth0

Set up MFA users for Auth0.

Create a new user and invite them to set up MFA

  1. Select Admin > Users > Add.

  2. Complete these Users Details:

    • First Name

    • Last Name

    • Email

    • User Name: The email address the user uses to sign in to Accruent Auth0 for MFA.

    • Is MFA User?: Select this option. This hides the SSO option and makes Send Email to User unavailable. When you create the user, they receive an email with setup instructions.

    • Notify me when MFA email is sent?: Sends you an email when the user is created and the setup instructions are sent. User creation can take a few minutes after you select Save.

    • Is Admin?: Select this option to make the user an administrator.

  3. Complete the remaining fields on the Users page, then select the Vendor Details, Roles, Groups, and Notification Subscriptions you want for the user.

    The user must be assigned a role that has the global permission Interface Access: Siterra.

  4. Select Save.

  5. Tell the new user to complete MFA setup using the instructions in the invitation email.

Invite existing user

  1. If you have not already done so, assign the user a role that has the global permission Interface Access: Siterra.

  2. Select Admin > Users.

  3. On the Users page, locate the user you want to invite.

  4. Select the Display Name of the user you want to invite, then complete these Users Details:

    • User Name: The email address the user uses to sign in to Accruent Auth0 for MFA.

    • Is MFA User?: Select this option. This hides the SSO option and makes Send Email to User unavailable. When you create the user, they receive an email with setup instructions.

  5. When you are finished making changes, select Save and Close.

  6. Tell the user to complete MFA setup using the instructions in the invitation email.

Edit MFA user

  1. Select Admin > Users.

  2. On the Users page, locate the user you want to edit.

  3. Select the Display Name of the user you want to invite.

  4. Clear Is MFA User?.

  5. Edit the user as required.

    If changing roles for the user, they must have a role that has the global permission Interface Access: Siterra.

  6. Select Save.

  7. Select Is MFA User?.

  8. Select Save and Close.

    The user receives another MFA invitation. If they already completed MFA setup when they were first invited, they don’t need to complete setup again.

Complete MFA setup and sign in

Tell MFA users to finish creating their account before they sign in. They should select the link in the password-change email and create their initial password.

  1. Go to the Siterra Sign In page.

  2. Enter the email address you used to create the account, and then select Sign In.

  3. In the Welcome page that appears, enter your Password, then select Continue.

  4. On the Secure Your Account page that appears, scan the QR code with your smartphone to request a one-time code.

  5. Enter the one-time code displayed on your smartphone, then select Continue.

ClosedAccruent Central Auth

Create users for Accruent Central Auth v3.

Create a new user and invite them to MFA

  1. Select Admin > Users > Add.

  2. Enter the following in the Users Details pane:

    • First Name

    • Last Name

    • Email

    • User Name: This must be the email address that the user will sign in to Accruent Central with for MFA.

    • Is MFA User?: Select this option. This hides the SSO option and makes the Send Email to User option unavailable. When you create the user, they are sent an email with instructions.

    • Notify me when MFA email is sent?: Emails you a notification when the user is created in the system and setup instructions are emailed to the user. User creation is not instant. When you click Save, the user is created within a few minutes.

    • Is Admin?: Select if the user is to be an Administrator user.

  3. Complete the remaining fields on the Users page, then select the Vendor Details, Roles, Groups, and Notification Subscriptions you want for the user.

    The user must be assigned a role that has the global permission Interface Access: Siterra.

  4. Select Save.

  5. Instruct the new user to complete MFA setup using the instructions in their email invite.

Invite existing user

  1. If you have not already done so, assign the user a role that has the global permission Interface Access: Siterra.

  2. Select Admin > Users.

  3. On the Users page, locate the user you want to invite.

  4. Select the Display Name of the user you want to invite.

  5. Select Is MFA User? and complete the fields described above.

  6. Select Save and Close.

  7. Instruct the user to complete MFA setup using the instructions in their email invite.

Edit MFA user

  1. Select Admin > Users.

  2. On the Users page, locate the user you want to edit.

  3. Select the Display Name of the user you want to invite.

  4. Clear Is MFA User?.

  5. Edit the user as required.

    If changing roles for the user, they must have a role that has the global permission Interface Access: Siterra.

  6. Select Save.

  7. Select Is MFA User?.

  8. Select Save and Close.

    The user is sent another MFA invitation, however, they do not need to complete MFA setup if they have already done so when they were originally invited to MFA.

Complete MFA setup

To complete account setup, link your account to your organization’s authenticator app.

  1. Select the link in the Accruent Central invitation email, or paste the link into your browser’s address bar.

  2. Complete the Register User page:

    • First Name

    • Last Name

    • Phone Number

    • Password

    • Confirm Password

    • Select three security questions and enter a different answer for each.

  3. Select Register User.

  4. If the Add Authenticator page displays, use your organization's authenticator app to add your account:

    1. In your organization's authenticator app, add a new account and scan the QR code when prompted to do so.

    2. In the authenticator app, locate the code. This may be labeled something like One-time password code.

    3. In Authenticator Code on the Add Authenticator page, enter the One-time password code from the authenticator app. Codes may change every few seconds depending on the app.

    4. Select Add Authenticator.

    5. On the Complete Configuration page, select Copy to copy the Recovery codes, and then save them in a secure location that follows your organization’s security policy.

    6. In Authenticator Code on the Complete Configuration page, enter another code from your authenticator app. This may be labeled something like One-time password code. Codes may change every few seconds depending on the app.

    7. Select Sign In.

  5. On the Sign In page:

    1. Enter your Email address and the password you created on the Register User page.

    2. In Tenant Name or Alias, select your organization's Siterra instance.

    3. Select Sign In.

    4. Obtain a new code from your authenticator app, and enter it.

    5. Select Sign In.

  6. Sign using the Siterra Sign In page.