Using Multi-Factor Authentication (MFA)
Multi-Factor Authentication or MFA, is a security measure implemented on all Portal users and API-integrated Partners that creates an additional layer of user verification by supplying a six-digit code to an authenticator app of your choice to verify you’re the user logging in or initiating a request/action.
Navigate to the Multi-Factor Authentication Enablement page by clicking Settings in the Admin category of the left-hand navigation panel. Then, click Multi-Factor Authentication Enablement under the Business Details section.

Note: The page does not dynamically load the entire list of all MFA-enabled users.
By using the search button 🔍 in the search bar, you can either load with no criteria to populate the entire list, or enter in a specific user you’re looking for to filter.
Enable MFA
After navigating to the Multi-Factor Authentication Enablement page, you’ll see a list of existing users in your portfolio and whether or not they have enrolled in and enabled MFA.
If you need to create an entirely new user with MFA, follow “Creating New User MFA Enablement” below.
For all existing users, skip to “Existing User MFA Enablement”.
Enroll Portal MFA in the Authenticator App
After enabling the MFA feature for the desired user, the user will be required to enroll in their preferred authenticator app (such as Microsoft/Google Authenticator, Okta Verify, or RSA SecurID) the next time they attempt to log in to the Portal.
See the screenshots of the example below for steps.

The prompt the MFA-enabled user will see upon first login.

Notification to download an Authenticator App
Recommended Authenticator Apps
See the expandable content below for a list of links and QR codes to recommended authenticator apps for MFA enrollment:

QR Code to enroll the Portal login to the preferred Authenticator App

Successful enrollment message.
Remember Me
After enrolling in MFA, and attempting an additional login to the Portal prompting for the current temporary authenticator code to be entered. Users are able to toggle a checkbox that says “Remember me for up to 30 days” to ensure that a user is not prompted to enter a temporary authenticator code for MFA the next time they login within the next 30 days.
Toggle the “Remember Me” checkbox, then enter the authenticator app code. This prevents the selection from not being saved.

Remember Me can be used by multiple devices under one account at a time.
Location Sharing - Remember Me
In order for the “Remember Me” feature to work is to ensure that users' location sharing is “Allowed” when accessing the Portal, and is not set to block the Portal.
Reset or Temporarily Disable MFA Enrollment
In situations where users leave your organization or lose their device that contains the authentication code setup required for MFA, you can disable MFA for that user to allow them to re-enroll. If and when the user is ready to re-enroll, simply re-enable their MFA enrollment and the process shown above will be prompted again for the user to set up MFA.
Note for Internal Employees
To reset or temporarily deactivate, submit a ticket here: https://payrix.atlassian.net/servicedesk/customer/portal/15/group/36/create/143
Deactivation Warning
MFA is required as part of information security and code of conduct policies. Do not attempt to deactivate MFA permanently as it may result in disciplinary action.