For Job Ready clients not using our Single Sign-On (SSO) solution, we have implemented Multifactor Authentication for users. This article will detail how Multifactor Authentication works in Job Ready.

TABLE OF CONTENTS

• How to Enable Multifactor Authentication
• Forcing Multifactor Authentication for all Users
• How Multifactor Authentication works
• User Logs
• Disabling Multifactor Authentication

How to Enable Multifactor Authentication

To turn on Multifactor Authentication for your Job Ready instance, contact Job Ready Support or contact your Customer Success Manager.

By default, Multifactor Authentication is enabled at a User level. To enable:

1. Go to your User Profile by clicking the Profile button at the top of the sidebar.
   
2. Under the Profile Panel, click on Enable MFA.
   
3. You will be redirected to a new page with a QR Code. Scan this QR Code with your preferred Authenticator. Alternatively, enter the manual code underneath the QR Code into your app. Compatible apps include Google Authenticator and Authy.
4. Your Authenticator App will provide you with a one-time password (OTP). Enter the OTP into the Multi-factor authentication OTP field, then click Confirm and Enable MFA. 

You're done! Multifactor Authentication has now been enabled for your user account.

Admin Users of Job Ready, including Job Ready staff members, can not enable Multifactor Authentication on a user's behalf. 

Forcing Multifactor Authentication for all Users

Job Ready can now force Multifactor Authentication to be enabled for all Job Ready users. This is helpful if your organisation has committed to use Multifactor Authentication at a company-wide level and there is a need to reduce manual monitoring of the policy. Contact Job Ready Support or your Customer Success Manager to facilitate this.

All Users, including new users of Job Ready will be prompted to set up Multifactor Authentication when they sign in for the first time after the feature is enabled, as shown below.

New users will then:

1. Scan the QR Code with the Authenticator App of their choice (like Google Authenticator or Authy)
2. Enter the one-time password (OTP) generated by their Authenticator App in the box above.
3. Click Login.

Multifactor Authentication is now enabled for your new User!

How Multifactor Authentication works

When Multifactor Authentication is enabled, users will be prompted to enter a Multifactor Authentication OTP whenever they sign in with an email address and password. Enter the code generated by your preferred authenticator app into the field provided, then click Login. 

OTPs are only required when signing into Job Ready with an email address and password. You will not be prompted for an OTP when signing in to Job Ready with Single Sign-On.

User Logs

Logs are available for all login attempts with Multifactor Authentication. You can find these logs under Account Activity on all User Profiles with Multifactor Authentication enabled.

Disabling Multifactor Authentication

If Multifactor Authentication is being forced at a company level, Multifactor Authentication can not be disabled on a case by case basis as detailed below. If you need to disable Multifactor Authentication for any reason, contact Job Ready Support or your Customer Success Manager for assistance. 

Opted-in Users can disable Multifactor Authentication at any time from your User Profile.

1. Go to your User Profile by clicking the Profile button in the top of the sidebar.
   
2. Click on Disable MFA under the Profile Panel. 

You will no longer be prompted for an OTP on log-in. You can re-enable Multifactor Authentication at any time by clicking Enable MFA from your profile.

Administrators can disable Multifactor Authentication on a User's behalf if a User chooses to stop using MFA or loses their authentication device. 

Thank you for reading! For any further questions about Multifactor Authentication in Job Ready, please contact Job Ready Support.