Introduction
Two-Factor Authentication (MFA) is needed to add a layer of security to your login process. When logging into an account, you enter your password and then receive a code via text on your smart device, in an email, or your mobile app. You will then enter this code, which provides a second layer of authentication. This document outlines the steps needed to set up MFA for your login.
Overview
Protect your account for your Descartes’ application with the 2-step verification, where at the first step you are prompted to enter your password and at the second step, you are prompted to enter a code that you receive in an authentication app or via email. The 2-step verification is an extra layer of security for your Descartes’ application account. This document outlines the steps involved in setting up 2-step verification for your accounts in Descartes products. If you are a user and have administrator role in the product, 2-step verification is a must and 2-step verification setup will be mandated when you attempt to login.
Navigating this material
This guide walks you through the 2-step verification concept and setup. If you lost your way or a step in this document, go to the table of contents in the beginning of this material and press CTRL click on the section you want to access and continue from there.
Why do you need 2-step verification?
Two-step verification makes it difficult for an unauthorized person to access your account. Your password can be compromised without your knowledge. Some common ways a password gets compromised are by using the same password across different sites or clicking links in phishing emails. The 2-step verification can keep fraudsters from accessing your account even if they have your password.
Important: When enabling 2-Step verification, make sure you add two forms of identification. If you forget your password or lose your phone, you can self-serve to login to your account with the second form of identification. This will remove the hassle and time normally needed to restore your account in the event you forget your password or lose your phone.
How does it work?
Let’s assume you enabled the 2-step verification.
When you attempt to log in to your account, these things will happen:
You are prompted to enter your password – First verification.
You are prompted to enter a one-time Password – Second verification. You will receive a one-time password via one of the identification methods you have set up.
After completing your work, you log out of the application.
On the next day, when you log back into the application with your account, you will be prompted to enter your password (first verification), but you will not be prompted to enter a one-time password (second verification). The Descartes application will prompt you for the second verification only if it encounters a new browser/device or the last validation occurred more than one week ago.
What do you need to set up two-factor authentication?
You need the following to set up two-factor authentication for your account:
Your cell phone
Google Authenticator or Microsoft Authenticator on your cell phone. (The instructions for obtaining those authenticators are in the next section.)
A Camera app on your mobile phone
An email address not associated with your Descartes application
Username and password for the Descartes application
Get Ready
We recommend setting up two different methods of multifactor authentication: using an authenticator app and an alternate email address. You can set up an authentication app on your mobile device and use an alternate email address as the second method. We recommend using one of these authentication apps:
Below are the prerequisite instructions for your Apple iPhone or Android device, as well as email authentication setup.
iOS
iOS - Google Authenticator app download/install instructions
To use Google Authenticator as your second step verification method, perform the following steps to download, install, and prepare Google Authenticator app.
Access the Appstore on your iPhone.
Tap Search in the Appstore.
Search for “Google Authenticator”. Download/install the authentic Google Authenticator app from the search results.
Once you install the Google Authenticator app, Google Authenticator will be available like the app on the screen below.
Access Settings on your iPhone.
Search for “Camera” in the iPhone settings, and then access the Camera app.
In the list, find the Authenticator app. Give permission by toggling the button next to it.
Performing the above steps completes the preliminary requirements for using the Google Authenticator app as your second-step verification.
iOS - Microsoft Authenticator app download/install instructions
You can skip this section if you have already installed Google Authenticator. If you want to use Microsoft Authenticator as your second step verification method, please follow the steps below to download, install, and prepare the Microsoft Authenticator app.
Access the Appstore on your iPhone.
Tap Search in the Appstore.
Search for “Microsoft Authenticator”. Download/install the Microsoft Authenticator app from the search results.
Once the Microsoft Authenticator app is installed, it will be available as shown in the screen below.
On your iPhone, open Settings.
In Settings, search for “Camera”, and then access the Camera app.
In the list, look for the Authenticator app. Toggle the button next to Authenticator to give access.
Performing the steps above completes the preliminary requirements for using the Microsoft Authenticator app as your second-step verification.
Android
Android - Google Authenticator App Download/Install Instructions and Camera Settings
If you want to use Google Authenticator as your second step verification method, perform the steps below to download, install, and prepare the Google Authenticator app.
Access the Playstore on your Android device.
Access the Search field in the Playstore.
Search for “Google Authenticator”. Tap the authentic Google Authenticator app from the search results.
Tap Install to install the app.
Once the Google Authenticator app is installed, Google Authenticator will be available in your list of apps, as shown in the screen below.
Access Settings on your Android device.
Scroll down and tap Privacy.
Tap Permission manager.
Tap Camera.
Tap Authenticator.
To allow camera permission for the app every time you use the app, tap Allow only while using the app. To opt for being asked to allow permission each time you use the app, tap Ask every time.
Performing the above steps completes the preliminary requirements for using the Google Authenticator app as your second-step verification.
Android - Microsoft Authenticator App Download/Install Instructions and Camera Settings
You may skip this section if you have already installed Google Authenticator. If you want to use Microsoft Authenticator as your second-step verification method, perform the following steps to download, install, and prepare the Microsoft Authenticator app.
Access the Playstore on your Android phone.
Access Search in the Playstore.
Search for “Microsoft Authenticator“. Tap Microsoft Authenticator in the search results.
Tap Install to install the app.
Once the Microsoft Authenticator app is installed, it will be available in your list of apps, as shown in the screen below.
Access Settings on your Android device.
Scroll down, and then tap Privacy.
Tap Permission Manager.
Tap Camera.
Tap Authenticator.
To allow camera permissions for the app every time you use it, tap Allow only while using the app. To opt for being asked to allow permission each time you use the app, tap Ask every time.
Performing the above steps completes the preliminary requirements for using the Microsoft Authenticator app as your second-step verification.
Accessing/Setting Up Two-Factor Authentication
Accessing Two-factor Setup
To protect your account with a second verification method for your login account, perform these steps:
In the Sign in dialog, login to your Descartes application with your Username, as shown below. Click Next.
Enter your Password, and then click Sign in.
Setting up Two-Factor Authentication with Microsoft/Google Authenticator
Note: Follow the steps in Accessing Two-factor Setup to navigate to the Password and Security screen, if you have skipped the instructions in that section.
Confirm that Microsoft Authenticator or Google Authenticator is installed on your cell phone. Please refer to What do you need?, which lists the requirements for installing Microsoft or Google Authenticator on your cell phone.
Select Microsoft or Google Authenticator from the MFA methods listed, then click Make Changes.
You will be prompted by the Setup Secondary Authentication screen, as shown below.
Note: In the example below, the QR code was covered for security reasons.Open the Authenticator app on your phone. (The look of the Authenticator app may vary, depending on the version used.)
For Google Authenticator, tap Scan a QR Code (as in the example below). For Microsoft Authenticator, tap the + > Work or school account.
Use your phone to scan the QR square shown on your computer screen.
Note: iPhone users may have to enable the camera in Settings in order to scan. In the example below, the QR code was covered for security reasons.Your account ID will be displayed in your authentication app. Click the account each time you want to generate a new code.
On your computer, enter the six-digit Authentication Code you see on your phone. Click Continue.
If you entered the code correctly, the Verification Set Up Complete screen is displayed. Click Continue to return to your account settings.
Performing the steps above completes the setting up of two-step verification with the Authenticator app as your second verification method.
Setting up Two-Factor Authentication with Email
Select Email, and then click Make Changes.
Enter your Email address. Click Continue.
Warning: For added security, please provide an Email address that is not your username.You are prompted to enter a six-digit code (see below). First, switch to the Inbox of your alternate email address.
In your email Inbox, look for a new email with Subject “Account Verification”. An example is shown in the screen below. Take note of the six-digit code in the email.
Switch back to the Descartes authentication screen. Enter the six-digit code you captured from the Account Verification email. Press Continue.
If Two-factor authentication setup is successful, you will see the screen below with the setup success message. Click Return To Application.
Performing the above steps completes the setup of two-step verification with email as a second verification method.
Setting up Two-Factor Authentication with Text Message
Select Text Message, and then click Make Changes.
Select your Country, enter your Mobile Phone Number, and then click Continue.
You are prompted to enter a six-digit Verification Code.
On your mobile phone, look for a text message from Descartes that includes a six-digit code. Take note of this code.
Switch back to the Descartes Manage Two-Step Verification dialog (shown above). Enter the six-digit Verification Code that you captured from the text message. Press Continue.
If Two-factor authentication setup is successful, the Verification Set Up Complete dialog is displayed. Click Return to Application.
Performing the above steps completes the setting up of two-step verification with text message as a second verification method.
Support
If you have followed the appropriate steps in this document, you have completed MFA setup for your login. If you have questions, please contact servicedesk@descartes.com.