Use Case: Complete Multi-Factor Authentication (MFA) Enrollment

When Multi-Factor Authentication (MFA) is enabled for your portfolio, you will be required to enroll in the authentication system using a valid SMS number or authenticator app. This tutorial will walk you through how to enroll in MFA for the first time using a Mobile Authenticator app or SMS/Text number.

MFA Screenshot Enroll.png — The prompt the MFA-enabled user will see upon the first login.

Objective

Enroll in Multi-Factor Authentication for your Portal login using your preferred Authenticator Mobile App or SMS/Text number.

Audience

Facilitator
Referrers
Merchants

Environment

Portal (Sandbox)
Portal (Production)

Prerequisites

Prerequisites:

You must have a fully boarded Payrix account to perform any of the actions described in the use case guides.
Payrix (or another Facilitator) must have enabled the Multi-Factor Authentication feature for your portfolio.
An SMS/Text device with a valid phone number - OR - A device with a recommended Authentication App

Warnings

Warnings will provide insight or advice to avoid risk, visibility, and product performance issues during this use case.

Warning: Referrers cannot enroll with SMS.

Referrers are required to use an Authenticator app, only Merchant-level users can enroll with SMS.

Warning: If you reply “STOP” to opt out of the SMS messaging, you will not receive another MFA verification code until you text the same phone number “START” to opt back into the SMS messaging.

Warning: If you’re unable to retrieve the number for to opt back into SMS, contact your Referrer (Merchants) or Payrix/your Facilitator (Referrers) to reset your MFA setup.

Tips

Tips will provide suggestions to streamline or better prepare you to apply this use case tutorial.

Tip: If you’re planning to use an authenticator mobile app for MFA, you can streamline the process by downloading the app before following this use case.

Additional Resources

Read Using Multi-Factor Authentication (MFA) for more information about usage and considerations for all levels of entity.
See the content below for a list of recommended Authenticator Mobile Apps for Referrers:

Recommended Authenticator Mobile Apps

App	iOS	Android
Microsoft Authenticator
Google Authenticator
Okta Verify
RSA SecurID

Enroll in Multi-Factor Authentication

1. Initiate the Enrollment Process.

Step 1: Make sure you are logged out of the Portal. Attempt to log back in.
Step 2: Upon viewing the Portal prompt to secure your account, click Continue.

2. Register your Preferred MFA Method.

Step 1: Select Mobile App or Text (SMS) from the Select MFA Method prompt and click Continue.
Step 2: Follow the steps applicable to your chosen MFA method:

Click here for steps to register your Authenticator app for MFA.

Step 3: Download and set up your preferred authenticator app from the Apple App Store or Google Play Store.
Step 4: Using the authenticator app, scan the code shown on the Scan the QR Code prompt.
Step 5: Enter the six-digit code displayed on your app to authenticate the app method registration.

Click here for steps to register your SMS phone number for MFA.

Step 3: Click Confirm to verify the phone number pulled from your User Profile information.
Step 4: (Optional) If your phone number does not match or is incorrect, click Modify to change the phone number. Then, click Confirm.
Step 5: Use the six-digit code sent in the following SMS message to the number you’ve confirmed to authenticate the SMS method registration:

“{Company} Verification Code: Use this one-time verification code to complete sign-in: XXXXXX. Do NOT share this code with anyone. This code is valid for 10 minutes. Reply STOP to opt out.”

Step 6: Click Continue to complete your Multi-Factor Authentication Enrollment

Result: Your user login is now enrolled in Multi-Factor Authentication as an added security measure to protect your account. Each time you login to the Portal you will be required to authenticate your login using your provided mobile app or SMS number enrollment.

Conclusion

Once your user is successfully enrolled in Multi-Factor Authentication, you can use this method to complete the login process to the Portal, using the “Remember Me” feature in your browser to extend your MFA authentication to 30 days each.

References

Click the links or items below to access any of the following pages:

Using Multi-Factor Authentication (MFA)