Page History: Two Factor Authentication
Compare Page Revisions
Page Revision: 2017/04/10 14:04
T4 now has two-factor authentication to allow for an easier and more secure login.
Setup
To setup go to www.t4login.com and login with your firm, username and password. Once logged in to the user setup web page you will see a new link called "Setup Security".
 (1).PNG)
All new and existing users will be set to "Not Enabled" by default.
In order to enable 2FA, the user changes the setting to Enabled, enters his phone number, and then clicks Continue.
This phone # must be able to receive txt messages via SMS. Landline phones are not supported.
If you do not have a cell phone, or simply prefer to use email instead, There is a link on the setup to enable email.
If two-factor authentication is not enabled for the user until they successfully verify their phone number/email. When they click "Continue" a 6-digit verification code will be sent and they must enter it and click submit.
Usage
After setting up 2FA, the user will be required to authenticate every device he uses to log into T4.
The user will log in using his firm/username/password just like normal.
Pic
If the user has not 2FA authorized this device yet, then the user will be sent a 6-digit authorization token and the application will prompt for it:
Pic
Once the user enters the 6-digit code, the users’ device will be considered “authorized” and this second step will not be required again.
Device Management
The “Setup Security” screen has a link to manage devices.
This screen shows the devices the user has 2FA authenticated, some usage information, and gives an option to delete device entries.
Old API Support
2FA is supported for all older version of T4 and apps written to older versions of our API.
When the user logs in using an old version, the login will fail, however an authentication token will be delivered to the user.
As the message explains, the user needs to append the 6-digit code to his password on the next login attempt.
So if the users’ password is “g01ng8roke”, he will type “g01ng8roke193566” on his next login attempt.
Send to Email
If the user forgets or loses his phone and cannot receive a text message, the authentication token can be sent to his email instead.
The screen that prompts for the authentication code will display a link to send the code to email instead after a 20-30 second delay: