.. _twostep-auth:

2-Step Authentication
======================

Genian |product_name| uses 2-Step Authentication (AKA 2 Factor Authentication , 2fa , mfa ) with OTP to add a
second level of authentication to an account log-in. Once OTP App
is installed a QR Code will display so you can scan it with your smartphone or
tablet. A six digit code will then be presented to then enter as the final step
in your 2-Step Authentication. (*six-digit code is
continuously changing so enter it in quickly*)

Step 1. Enable 2-Step Authentication For Administrator Account
---------------------------------------------------------------

#. Go to **Management > User** in the top panel
#. Go to **Administrators** in the left User Management panel
#. Find and click **Username** of Administrator account in the main
   Administrators window
#. Find and click **Administrator** tab
#. Find **General: 2-Step Authentication** section in the main window
#. Click **OTP** in drop-down
#. Find **Notification Options** section. Enter the following:

    - **Mobile Phone** (*e.g. 123-456-7890*)
    - **Display Phone Number** (*This is an optional number you want visible to
      sender*)
    - **Email** (*Multiple Email Addresses separated by commas*)

#. Click **Update**

Step 2. Enable 2-Step Authentication For The Policy Server
-----------------------------------------------------------

#. Go to **Preferences** in the top panel
#. Go to **General > Console** in the left Preferences panel
#. Find **Web Console: 2-Step Verification Methods** section in the main
   Console window
#. Click **Checkbox** for **OTP**
#. Click **Update**

Step 3. Setup OTP App
----------------------------------

#. On your **Mobile Phone** go to **App Store** to download **OTP App**
#. Logout from Policy Server UI and Login again
#. After the first login is complete, the OTP app setup page will be displayed
#. Please install one of the **OTP Apps listed at the top of the screen** through your **smartphone's app store**
#. Scan the QR Code displayed on the screen through the installed app
#. If you cannot scan, click **Can't scan? Use text code instead.** and directly enter the security key shown into the OTP app
#. Enter the **6-digit number** generated in the **OTP** app into the **Authentication Code** field
#. Mobile Phone will present a **6 digit code** that you will enter it into the **OTP code input**
#. Click **OK**