Frequently Asked Questions:
What is MFA?
MFA, or Multi-Factor Authentication, is an additional security measure that helps to protect you and your personal information, attached to your account. It makes it harder for hackers to break into your account, even if they manage to steal your password.
The registration process requires you to use Multi-Factor Authentication (MFA) to access your account.
What is an Authenticator App?
A code that you can retrieve from your phone is used like a second, temporary password as part of your login. An authenticator app generates these ‘time-based codes’ that change every 30 seconds. You'll use these codes along with your password to sign in. This form of MFA is much more secure than the email or text based confirmation codes you have probably seen in other applications on the internet, though it works similarly.
Recommended Authenticator Apps:
How do I set up Authenticator-App MFA?
As part of setting up your account, you will be required to set up this form of MFA, sometimes also called ‘TOTP’ or ‘Time-based One Time Password’ authentication. To do this, you can follow these steps:
- Download one of the authenticator apps above
- Click the sign-in link above and sign in to CompactConnect with your temporary credentials
- Reset your password when prompted
- In your authenticator app, add an account and scan the QR code presented on the MFA setup page. The details for how this works depends on which authenticator app you are using. When you have the account added, make a point to give it a name you will recognise in the future.
- Enter the 6-digit code from your authenticator into the CompactConnect MFA setup page (codes refresh every 30 seconds)
- Click "Sign in" to complete setup
Note: There is a 3-minute time limit from when you log in to when you must have your MFA set-up, before the login screen will kick you out and make you start over. If you are prompted to set up MFA again, delete your previous account entry from your MFA app before you try again.
YouTube provides several videos to help understand the MFA setup process. These are a couple of short videos that you may find helpful.
Google Authenticator:
Microsoft Authenticator: https://youtu.be/aN_E74Vfw00
How do I sign in with MFA (after setup)?
- Click the sign-in link from your invitation email, or go to https://app.compactconnect.org/Dashboard to find your login page
- Enter your username and password as usual
- When prompted for a code, open your authenticator app
- Find the authenticator app entry you created during MFA setup
- Enter the current 6-digit code from your authenticator app (codes refresh every 30 seconds)
- Click "Sign in"
I tried to set up MFA but it asked me to set it up again. How do I fix this?
When you’re first setting up MFA, there is a 3 minute time limit on the setup process. If you took longer than that before finishing the setup, you were probably sent back to the login screen, then prompted to set up MFA again after you entered your password again. If you try to use the authenticator app’s account entry that you already created, the screen will tell you that the code is invalid.
To get out of this situation, if the login screen prompts you with a QR code while you are logging in, your previous authenticator app account entries will not work. You’ll need to delete any old account entries for CompactConnect from your authenticator app before you scan the QR code or set up a new account again. Once you add a new account to your authenticator app and use a code from it, you should be able to complete MFA setup.
I lost my MFA app or my phone is broken. How can I get back into my account?
It is possible to lose access to your MFA configuration. You may have uninstalled the app, deleted the account entry in the app, or even lost or broken your phone. If something like this happens and you’re not able to recover it (like by transferring your iCloud data to a new phone, if you’re an iPhone owner), you can recover access to your CompactConnect application and re-establish a new MFA configuration.
To regain access to your account without your original MFA device, you can use the “Locked out of your account?” feature from the CompactConnect dashboard:
Look for the link in the bottom bar and follow it. You will be directed to a new page, where you will enter the same personal information you used to register as a practitioner, plus the email address and password for your account. If the information you enter into that form matches your account, we will send you an email with a link to follow to recover access to your account. Be sure to enter the correct information carefully and review it! For security reasons, we only allow a small number of account recovery attempts per 24 hour period.
What if I lost or forgot my password?
If you lost or forgot your password, you can reset it with a flow that is separate from the “Locked out of your account?” feature described above. To reset your password, navigate to your login page by selecting the “Login as Practitioner” tile.
Look for and follow the “Forgot your password?” link. From there, you will be asked to enter your email address, to have a password reset confirmation code sent to your email. Once you enter that code from your email into the page, you will be able to set your password to something new. You should be able to log in using your new password.
If you also lost your MFA device, you should now be ready to proceed to the steps described above, for I lost my MFA app or my phone is broken. How can I get back into my account?
Comments
0 comments
Article is closed for comments.