{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-user-guide/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["img","admonition"]},"redocly_category":"User Guide","type":"markdown"},"seo":{"title":"Manage Your Authentication"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"manage-your-authentication","__idx":0},"children":["Manage Your Authentication"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Every Fordefi user can review and manage their personal sign-in security from"," ","the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Authentication"]}," area of their user profile. Your ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["primary login"]}," method"," ","is shown on the main profile screen:"]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/auth-self-serve.d8b89b6e52de10c6fa1d5770e2a26ec579798344d931f329f4490c4b2b6d0a21.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Adding or removing an MFA method, or removing a passkey, is a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["sensitive"," ","action"]},". Before the change is applied, you'll be asked to re-authenticate using"," ","one of your existing MFA methods. When ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["adding"]}," a new MFA method, you must"," ","verify with a ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["different"]}," method than the one you're adding - for example, use a"," ","TOTP code to add a security key, or use a security key to add a TOTP app. The"," ","challenge is valid for that single action and expires after five minutes."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"primary-login","__idx":1},"children":["Primary login"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Your primary authentication method is shown on the main profile screen. It is"," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["read-only"]},". Supported primary login methods are:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Email and password OR passkey"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Google social login"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Microsoft social login"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Apple social login"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Okta SSO"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To change or reset your primary login method, contact Fordefi support at"," ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"mailto:support@fordefi.com"},"children":["support@fordefi.com"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"passkeys","__idx":2},"children":["Passkeys"]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/passkey-tab.87595dcffd5a93bd54e0e8262ff76e143914ebdde6beb3a098dfd49536a0556c.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Passkeys"]}," tab lists the passkeys registered to your account, with the"," ","following details:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Device name"]},": The authenticator name reported by your operating system or"," ","key manager."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Created"]},": When the passkey was registered."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Last used"]},": The last time the passkey was used to sign in."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Action"]},": Remove the passkey."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you have no passkeys registered, the tab shows: ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["\"You don't have any passkeys"," ","yet.\""]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"remove-a-passkey","__idx":3},"children":["Remove a passkey"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Remove"]}," on the passkey's row."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm in the dialog that opens."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Complete the step-up authentication challenge."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The passkey is removed and a ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["\"Passkey removed.\""]}," confirmation appears."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"mfa","__idx":4},"children":["MFA"]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/mfa-tab.b46886975946b1ea44038e8357995244765df981ff039bfd4e8c4da7246136c0.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Your first MFA method is set up when you first sign in to Fordefi, and it is"," ","always a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["TOTP authenticator app"]},". From the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["MFA"]}," tab you can view your"," ","methods and add more - additional TOTP apps or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["WebAuthn security keys"]}," (such"," ","as a YubiKey). You can enroll multiple methods of each type. If you have more"," ","than one method, you can sign in with any of them, on both web and mobile."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The tab lists your MFA methods, with the following details:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["MFA method"]}," - the factor type, either ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["TOTP Authenticator App"]}," (for"," ","example Google Authenticator or Yubico Authenticator) or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Security Key"]}," (for"," ","example a YubiKey)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Created"]}," - when the method was added."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Last used"]}," - the last time the method was used."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Actions"]}," - add or remove a method."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Whether you can manage MFA depends on your organization's policy:"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["If one of your organizations ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["requires MFA"]},", you'll be prompted to enroll a"," ","method."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["If none of your organizations require MFA, this tab is ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["disabled"]}," - you"," ","cannot opt in on your own. Contact your organization administrator to enable"," ","MFA."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"add-an-mfa-method","__idx":5},"children":["Add an MFA method"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add MFA method"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Complete the step-up challenge. You must verify with a method ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["different"]}," ","from the one you're adding: to add a security key, verify with a TOTP code;"," ","to add a TOTP app, verify with a security key."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The enrollment flow opens in a modal. Supported factors are ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["TOTP"]}," and"," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["WebAuthn security keys"]}," (such as a YubiKey)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Follow the prompts to enroll. For a security key, touch the key when prompted"," ","to authorize it. When enrollment succeeds, the modal closes and the table"," ","refreshes."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"remove-an-mfa-method","__idx":6},"children":["Remove an MFA method"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Remove"]}," on the method's row."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm in the dialog that opens. Removing a method means you can no longer"," ","use it to sign in, and cannot be undone."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Complete the step-up authentication challenge."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The method is removed and a ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["\"MFA method removed.\""]}," confirmation appears."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You must always keep at least one ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["TOTP authenticator app"]}," so you are never"," ","locked out of your account (for example, when signing in on mobile). You can't"," ","remove your last TOTP method - ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Remove"]}," is disabled for it. Security keys can"," ","be removed freely, as long as one TOTP method remains."]}]}]},"headings":[{"value":"Manage Your Authentication","id":"manage-your-authentication","depth":1},{"value":"Primary login","id":"primary-login","depth":2},{"value":"Passkeys","id":"passkeys","depth":2},{"value":"Remove a passkey","id":"remove-a-passkey","depth":3},{"value":"MFA","id":"mfa","depth":2},{"value":"Add an MFA method","id":"add-an-mfa-method","depth":3},{"value":"Remove an MFA method","id":"remove-an-mfa-method","depth":3}],"frontmatter":{"seo":{"title":"Manage Your Authentication"}},"lastModified":"2026-07-13T07:48:44.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/user-guide/organization-management/manage-your-authentication","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}