How do I turn on 2FA for my organisation?
FlowLogic Support turns on 2FA and sets your organisation's rules - which methods users can use, how many days a device is remembered and which social logins are allowed. Admins can change the 2FA level for one user.
Key Points
FlowLogic Support turns on and sets up two-factor authentication (2FA, also called MFA) for your organisation. To turn it on or change your 2FA rules, your FlowLogic admin team can email support@flowlogic.com.au.
FlowLogic Support can change the required 2FA methods, days to remember a device, SMS codes and permitted social logins, and can set up single sign-on (SSO) with Microsoft Entra ID.
Users with financial access always use an authenticator app and enter a code every day, to meet Australian Taxation Office (ATO) requirements. This can't be changed.
You don't have to switch everyone over at once - FlowLogic Support can turn 2FA on for a few users or groups first.
Admins with access to manage 2FA can change one user's level in System Menu > Users, on the Details tab under Two Factor Authentication.
Two-factor authentication (2FA), also called multi-factor authentication (MFA), is turned on and set up for your organisation by FlowLogic Support. To turn it on or change your organisation's 2FA rules, your FlowLogic admin team can email support@flowlogic.com.au.
Which 2FA settings can FlowLogic Support change?
- Required 2FA methods - the minimum for users without financial access: Email/SMS only, Authenticator app or Email/SMS, or Authenticator app only.
- Users with financial access - always use an authenticator app and enter a code every day. This is required to meet Australian Taxation Office (ATO) requirements and can't be changed. FlowLogic Support can tell you which access counts as financial.
- Days to remember a device - how long users without financial access can skip the code on a device they've chosen to remember: Never, 1, 3, 7, 15 or 30 days.
- SMS codes - whether codes can be sent by SMS. SMS needs an SMS provider set up for your organisation. If SMS isn't available, users get codes by email or an authenticator app instead.
- Permitted social logins - whether users can log in with a Google, Microsoft or Facebook account instead of their username and password. The social account must have the same email address and first and last name as the user's FlowLogic account. Users still enter a 2FA code.
FlowLogic Support can also set up single sign-on (SSO) with Microsoft Entra ID if you'd rather your staff log in with their work Microsoft account.
How do I roll 2FA out to my team?
You don't have to switch everyone over at once. FlowLogic Support can turn 2FA on for a few users or groups first, for example to test it, then set the minimum for everyone at a time that suits you.
Before it starts, let your staff know what to expect and share How do I set up 2FA for my FlowLogic account? with them. Check each user has a working email address or mobile number in FlowLogic if they'll get codes by email or SMS.
How do I change the 2FA level for one user?
FlowLogic admins with access to manage 2FA can change an individual user's level:
- Click the System Menu and select Users.
- Open the user you want to change.
- On the Details tab, under Login Details, choose a level from Two Factor Authentication: Authentication App or Email/SMS, Authentication App only, Email/SMS Only, or None (least secure).
- Save the user.
Users with financial access always need an authenticator app, whatever is set here. If you can't see this option, ask FlowLogic Support.