Manage multi-factor authentication (MFA) settings

The following MFA management options will only be available for non-federated users.

You’re a non-federated user if your identity is authenticated directly by STACKIT Identity Provider (IdP). This means authentication isn’t delegated to another IdP.

Multi-factor authentication (MFA) enrollment is typically completed during your initial login, but you can also activate it at any point during the grace period. The procedure for the initial setup is detailed in the MFA enrollment guide.

You can change your MFA settings at any time, and the next section shows you how.

Add a verification method

1. After you have logged in to your account, navigate to the User Settings section.

2. Click on “Password & Security” and then click on “Multi-factor authentication”.

3. For the MFA you can chose between two methods.

   • Authenticator application: The authenticator application is installed on your mobile phone and generates a verification code.
   • Email: We send a verification code to your email account.

   Next to each method’s description, there is an Add method button.

4. Click on “Add method” for the method you want to set up.

5. A confirmation message will be shown, confirm your choice.

6. You will then be logged out and redirected to the login page to complete the enrollment for the chosen method.

7. Follow the on-screen instructions to finalize the setup as described in the MFA enrollment guide.

Set a primary verification method

If you have more than one verification method set up, you can select which one of them is your primary method. The primary method is the one used by default in order to verify your identity. That said, you can always switch between them.

1. After you have logged in to your account, navigate to the User Settings section.
2. Click on “Password & Security” and then click on “Multi-factor authentication”.
3. Next to each added method, there is a kebab menu, click on it.
4. Click on “Set as primary”.
5. A confirmation message will be shown, confirm your choice.
6. A confirmation notification is shown.
7. In your next log in, the selected method will be the one used by default in order to verify your identity.

If you forgot or do not have access to your primary verification method

Use either the secondary verification method or one of your one-time use recovery codes to access your account.
Then go to the MFA settings page and reset your primary method.

Switch between verification methods

If you have more than one verification method added, you can switch between them in the verification step while logging in.

1. Provide your user name and password
2. On the “Enter your code” page, click on either “Use code sent by email instead” (when the primary method is an Authenticator application) or “Use code from auth app instead” (when the primary method is email)
3. The “Enter your code” page will switch to the other method.

Remove a verification method

Provided more than one verification method is set up, you can remove any verification method you no longer wish to use.

1. After you have logged in to your account, navigate to the User Settings section.
2. Click on “Password & Security” and then click on “Multi-factor authentication”.
3. Next to each added method, there is a kebab menu, click on it.
4. Click on “Remove method”.
5. A confirmation message will be shown, confirm your choice.
6. A confirmation notification is shown.

If you have only one verification method set up, you will need to add another one before you can remove the current one.