Enroll users with an Authenticator Application

This guide explains how to help end users activate and use Multi-Factor Authentication (MFA) on their smartphones with an authenticator app.

It describes the setup process and what users will experience during their first MFA login and subsequent authentications.

Before starting enrollment:

1. Verify that the smartphone’s date and time are correct. It is best to set the phone to update automatically, otherwise, MFA codes may be rejected.

2. Make sure users know their domain credentials.

3. Advise users to have their smartphone at hand during their first connection.

4. Ensure users install a TOTP-based authenticator application on their smartphone.

Before enrolling, make sure that MFA is enabled for the user account in UserLock.

When a user logs in for the first time after MFA activation, a QR code dialog box will appear.

The user must:

1. Open the Authenticator app on their smartphone.

2. For example for Google Authenticator app, tap the multi-colored plus sign at the bottom right of the app. Select Scan QR code (or enter setting key).

3. Scan the QR code displayed on screen.

4. The app will generate a 6-digit MFA code.

5. Enter this code into the UserLock dialog box and click Verify and Continue.

Once verified, the MFA setup is complete.

After the initial enrollment, MFA becomes a regular part of the user’s login process.
Each time a connection requires MFA, the user will be prompted to verify their identity with a time-based code from their authenticator app.

Typical experience:

1. User enters credentials.

2. The MFA prompt appears.

   

3. They open the authenticator app, read the code, and type it in UserLock’s dialog box.

4. Access is granted.

Administrators can adjust the MFA experience to fit their organization’s needs: