With two-step verification (also known as two-factor authentication), it is possible to add an extra layer of security to accounts should the password be discovered.
The Reftree platform has been set up to allow access via strong authentication based on the following elements:
- User and Password
- Code provided by Google Authenticator mobile app
The first time a user logs in, after entering his or her credentials and pressing the login button, the application generates a code to be framed with the app and paired with the system.
At this point, it will be sufficient to frame the QR code with the Google Authenticator app and the association between the devices will be made. For subsequent accesses, a code will be requested, which is generated by the app and which must be entered in the required field'.
This mode has no impact on access via SSO.