Multi-Factor Authentication (MFA) in Instrumental’s web app is a method of securing your user account by requiring that you provide both a password and proof that you own a configured device in order to log in. That proof comes in the form of a 6-digit number called a “code” that is generated by an app on your phone or computer.
By default, Instrumental requires web app users to log in with MFA. If you do not want to use MFA and your employer allows it, you can contact your Instrumental Customer Success manager to disable it.
Table of Contents
Enabling MFA
If you do not have an MFA device configured, you will be prompted to set one up the next time you log in. (If not, see Resetting MFA below, or contact Instrumental Customer Success for assistance.)
After entering your username and password, you will see the MFA setup wizard shown below. Click “SET UP.”
You will need to download an app that can provide MFA codes. Most people choose to use Google Authenticator on their phone, but you can use any compatible phone or desktop app such as Authy or LastPass Authenticator. Users based in China may have the best success with the Alibaba Cloud app. The next screen (shown below) will provide links to download compatible phone apps if needed.
Click “NEXT” and open your MFA app. If you are using a phone app but signing in on another device, click the button in your app to add a new service and then scan the QR code on your screen.
If you chose to use a desktop MFA app or if you are signing in on the same device as your MFA app, click “Can’t scan?” You’ll see a code you can enter into the app instead of scanning the QR code.
Next, your app will show you a 6-digit code. Enter it into the box shown below to verify that you have set up MFA correctly.
After clicking “VERIFY” you will be logged in and redirected to the Instrumental web app.
The next time you log in, instead of the MFA setup process, you will see a screen like the one below. Use your MFA app to get a code to put in the box. Entering a valid code and clicking “VERIFY” will log you in.
If you get a new device, most MFA apps have the ability to transfer codes to another device. You can also reset your MFA as described below if you want to switch to a new device. However, if you lose access to your MFA device while you are not logged in, you will need to contact Instrumental Customer Success for assistance.
Resetting MFA
On your account page in the Instrumental web app, you will see an MFA section:
If MFA is enabled, you can click the reset link to remove your active MFA device. You will get a confirmation alert in the app, the description will change, and we will send you an email. The next time you log in, you will be prompted to complete the setup process described above.
Note: if you checked the box for “do not challenge me on this device for the next 30 days” when you last logged in, then you will not be prompted to set up MFA again in that browser until the 30 days expire. In this case you can use a different device, browser, or incognito mode if you want to set up MFA sooner.