Enroll multi-factor authentication (MFA)

All non-federated users must use multi-factor authentication (MFA). After you complete the MFA enrollment, you must provide a verification code each time you log in.

You’re a non-federated user if your identity is authenticated directly by STACKIT Identity Provider (IdP). This means authentication isn’t delegated to another IdP.

You can choose between two MFA methods:

• Authenticator app: You use one of the authentication apps listed below on your phone to generate a verification code each time you log in.
• Email: You receive the verification code via email each time you log in.

The MFA enrollment steps vary based on your chosen method. After logging in without MFA enrolled, you can select your preferred method.

Prerequisites

• You have a STACKIT user account: Create a user account

Enroll MFA via authenticator app

Supported applications

Application	Supported	TOTP
Google Authenticator	✅	✅
Microsoft Authenticator	✅	✅
NetIQ Auth	✅	✅
LastPass Authenticator	✅	✅
Authy	✅	✅
Duo Mobile	✅	✅
FreeOTP	✅	✅
Yubico Authenticator	✅	✅
Okta Verify	✅	✅
Salesforce Authenticator	✅	✅

Procedure

1. Select Authenticator app (this is the default, flagged as ‘Recommended’) and select Set up.
2. The next screen provides a QR code.
3. On your phone, open a supported QR code scanning application and follow its instructions to scan the QR code.
4. The application on your phone provides a code.
5. Return to the browser displaying the QR code. Enter the code and select Confirm.
6. If the code is correct, a new window displays 10 recovery codes. Each code can be used once during the verification step when logging in, serving as a substitute if you encounter issues accessing the verification code. Save them securely, then confirm with Next.

This is the only time the recovery codes are displayed. Save them securely by writing them down, copying them to a file, or downloading the PDF.

Finally, you see a message confirming that MFA enrollment is complete. Select Done to get redirected to the STACKIT Portal landing page.

Enroll MFA via email

1. Select Email, then select Set up.
2. You receive an email with a verification code at your email address.
3. Return to your browser and enter the verification code. Select Verify.
4. If the code is correct, a new window will display 10 recovery codes. Each code can be used once during the verification step when logging in, serving as a substitute if you encounter issues accessing the verification code. Save them securely, then confirm with Next.

This is the only time the recovery codes are displayed. Save them securely by writing them down, copying them to a file, or downloading the PDF.

Finally, you see a message confirming that MFA enrollment is complete. Select Done to get redirected to the STACKIT Portal landing page.

Grace period

You can skip MFA enrollment for seven days to minimize disruption. After this grace period, you must complete MFA enrollment to continue accessing STACKIT services.