Multi Factor Authentication (MFA) for Submittal Recipients

Enable for System

To enable Multi-Factor Authentication (MFA) your security enabled user should navigate to the security settings screen. Note that only the users with security settings will see this interface.

Admin > Security Settings.

2020-06-16_21-48-53.jpg

1. Enable the option for submittal recipient authentication. By default this is disabled.

2. Define how often your users/recipients should authenticate. As long as they are accessing the system from the same IP address, the authentication will be maintained. This setting is used for both users and submittal recipients.

2020-06-27_10-25-04.jpg

Enable MFA on Project Configuration

Once enabled for the entire system, this setting is available to turn ON/OFF under Set Up > Project Configuration > Main > Submittal Defaults > Batching, Downloads and Medium > Downloads > Require recipient to authenticate when accessing submittals.

The default for this can be set under Project Configuration Templates at Admin.

Email Templates

Users can customize the authentication email which is sent to submittal recipients (when asked to authenticate).

Go to Admin > Output Templates > Email Templates > Recipient Authentication Message to modify.

Recipient View

When accessing the download from hyperlink option for a submittal, the user will first select their name from the list (* see note). After selecting their name and clicking download, the user will be sent an email with an authentication code and prompted to enter the code on the download screen.

After completing this, they will only need to re-authenticate every X days (as configured above), as long as they access the submittal download links from the same IP address.

Note: When MFA is not required for submittal recipients, there is an option for users who do not appear in the recipient list to still access the submittal. However, when MFA is required, this option is unavailable as an additional security measure.