Two-Factor Authentication

This article provides step-by-step instructions for enabling Audit Manager's Two-Factor Authentication (2FA), a security feature that enhances your account protection. 2FA combines your username and password with a unique authentication code, ensuring that even if your login credentials are compromised, unauthorized access is effectively prevented.

Enabling 2FA is strongly recommended to protect sensitive data and prevent unauthorized access to your Audit Manager account. Organizations should request activation of 2FA at the account level. Once enabled, each user must set up 2FA for their individual account. Users cannot disable 2FA on their own; to request deactivation, please contact Customer Support.

Additionally, a weekly 2FA Status Report is automatically available for AM+ and AMP accounts. This report lists all users and shows whether 2FA is enabled, helping organizations monitor compliance and support ongoing security and audit reviews.

Follow the steps below to enable Two-Factor Authentication for individual user accounts:

1. Navigate to the User Profile menu and select Security from the drop-down.Note: If you don't see the Security option in the dropdown, please contact your administrator to enable multi-factor authentication for your organization.
2. To set up 2FA, use a time-based one-time password (TOTP) application. Download one of the recommended applications from the App Store, Google Play, or Windows Store. Recommended apps include:
   • Microsoft Authenticator
   • Google Authenticator
   • Passwords (included in iOS)
   • Authy
   • 1Password
   • LastPass Authenticator
3. Click on Set Up Two-Factor Authentication and a side panel will appear with a list of recovery codes to proceed further.
4. Click on 'Download or Copy to save all the recovery codes in a secure location, then click Next. 
5. A QR Code and alphanumeric code, will be displayed on the screen.
6. Open the authenticator app on your phone that you downloaded in step 2. There will typically be a + symbol or an Add option to set up a new 2FA account in the authenticator app. Select this option.
7. The authenticator app should then prompt you to either Scan QR Code on the screen, or Enter Key Manually, Setup Key, etc. 
   • If you select Scan QR Code in the phone app, point your phone camera at the QR code in the side panel (example in the red box in the image above). The authentication app will then set up the account for you. Save the account in the authenticator app when prompted. Proceed to Step 8.
   • If you choose Enter Key Manually or Setup Key in the phone app, the app will prompt you to enter the alphanumeric code displayed on the Audit Manager screen shown in the example image above.
8. Enter the 6 digit code from the authenticator app on your phone, into the form on the screen (highlighted in blue below)
   
9. Click Complete Setup to enable two-factor authentication (2FA). A confirmation message will appear on the screen.
10. Click Confirm and start using Audit Manager with 2FA enabled. 
    Note: Users cannot disable two-factor authentication (2FA) once enabled. To disable it, contact Customer Support.

© Healthicity, LLC