Multi-Factor Authentication (MFA)

Administrators can create and invite a user to set up multi-factor authentication (MFA) or invite an existing user to MFA. This allows your organization to add an additional layer of security for external users who are not allowed to use your organization's Single Sign-On.

Once an MFA user is created or an existing user invited to MFA, their user account is locked to changes. However, you can edit an MFA user by clearing Is Mfa, making changes then re selecting Is Mfa.

Create a new user and invite them to MFA

1. Click Admin > Users > Add.

2. Enter the following in the Users Details pane:

   • First Name

   • Last Name

   • Email

   • User Name: This must be the email address that the user will sign in to Accruent Central with for MFA.

   • Is MFA User?: Select this option. This hides the SSO option and makes the Send Email to User option unavailable. When you create the user, they are sent an email with instructions.

   • Is Admin?: Select if the user is to be an Administrator user

3. Complete the remaining fields, then select the Vendor Details, Roles, Groups, and Notification Subscriptions you want for the user.

   The user must be assigned a role that has the global permission Interface Access: Siterra.

4. Click Save.

5. Instruct the new user to complete MFA setup using the instructions in their email invite.

Invite existing user

1. If you have not already done so, assign the user a role that has the global permission Interface Access: Siterra.

2. Click Admin > Users.

3. On the Users page, locate the user you want to invite.

4. Click the Display Name of the user you want to invite.

5. Select Is Mfa.

6. Click Save and Close.

7. Instruct the user to complete MFA setup using the instructions in their email invite.

Edit MFA user

1. Click Admin > Users.

2. On the Users page, locate the user you want to edit.

3. Click the Display Name of the user you want to invite.

4. Clear Is Mfa.

5. Edit the user as required.

   If changing roles for the user, they must have a role that has the global permission Interface Access: Siterra.

6. Click Save.

7. Select Is Mfa.

8. Click Save and Close.

   The user is sent another MFA invitation, however, they do not need to complete MFA setup if they have already done so when they were originally invited to MFA.

Complete MFA setup

To complete the setup of your user account, you must link it to your organization's authenticator app.

1. Click the link in the Accruent Central invite email or paste into your browser's address field.

2. Complete the Register User page:

   • First Name

   • Last Name

   • Phone Number

   • Password

   • Confirm Password

   • Select three security questions and enter a different answer for each.

3. Click Register User.

4. If the Add Authenticator page displays, use your organization's authenticator app to add your account:

   1. In your organization's authenticator app, add a new account and scan the QR code when prompted to do so.

   2. In the authenticator app, locate the code. This may be labeled something like One-time password code.

   3. In Authenticator Code on the Add Authenticator page, enter the One-time password code from the authenticator app. Codes may change every few seconds depending on the app.

   4. Click Add Authenticator.

   5. On the Complete Configuration page, click Copy to copy the Recovery codes to your computer's clipboard then paste them to a secure location in compliance with your organization's security policy.

   6. In Authenticator Code on the Complete Configuration page, enter another code from your authenticator app. This may be labeled something like One-time password code. Codes may change every few seconds depending on the app.

   7. Click Sign In.

5. On the Sign In page:

   1. Enter your Email address and the Password you created on the Register User page.

   2. In Tenant Name or Alias, select your organization's Siterra instance.

   3. Click Sign In.

   4. Obtain a new code from your authenticator app, and enter it.

   5. Click Sign In.

6. Sign using the Siterra Sign In page.