Multi-Factor Authentication
Relyt provides Multi-Factor Authentication (MFA) to secure your account by requiring an additional authentication factor along with your username and password.
MFA can be enabled at three levels:
-
Organization-wide: If you manage the main account, you can enable or disable at the global level. If MFA is enabled organization-wide, all accounts will require MFA during sign-ins.
-
Individual cloud account: You can enable MFA for the individual cloud account if it is not enabled at the organization level.
-
DW users: As a DW service unit console, you can enable MFA for DW users in your DW service unit console by using Terraform scripts. As a DW user, if MFA is not enforced at the service unit level, you can enable MFA for your own account.
Enable MFA at the organization level
MFA is disabled, by default. If you sign in with the main account, you can enable MFA at the organization level. This setting requires that all users who try to sign in provide additional credentials, in addition to their usernames and passwords.
To enable MFA at the organization level, perform the following:
-
Sign in to the Relyt console with the main account credentials.
-
From the top navigation bar, choose Organization.
-
In the Multi-Factor Authentication section, turn on the switch to enable MFA.
After you enable MFA for your organization, all accounts will require MFA during sign-ins.
Disable MFA at the organization level
You can disable MFA at the organization level after it is enabled.
To disable MFA at the organization level, perform the following:
-
Sign in to the Relyt console with the main account credentials.
-
From the top navigation bar, choose Organization.
-
In the Multi-Factor Authentication section, turn off the switch to disable MFA.
When MFA is disabled organization-wide, only cloud accounts that have independently enabled MFA will require it for sign-ins.
Enable MFA for an individual cloud account
You can enable MFA for an individual cloud account to enhance the security of the cloud account.
To enable MFA for an individual cloud account, perform the following:
-
Sign in to the Relyt console using your cloud account credentials.
-
In the upper-right corner of the page, click the Expand button next to the system role, and click Profile.
-
In the Multi-Factor Authentication section, click Assign MFA Device.
You can use your phone or other device as a virtual MFA device.
-
In the Configure Virtual MFA Device dialog box, perform the following operations as instructed:
a. Install a virtual authenticator app. For a list of compatible apps, see Compatible virtual authenticator apps.
b. Use the app to scan the QR code displayed. If you prefer, click Copy Secret Key to manually enter the key into your app.
c. Enter your MFA code.
-
Click Assign MFA.
-
In the Assign Confirmation dialog box, enter your MFA code and click Confirm.
Subsequently, the account will require MFA for future sign-ins.
Disable MFA for your cloud account
You can disable MFA for your individual cloud account.
This operation can be performed only when MFA is not enabled at the organization level.
-
Sign in to the Relyt console with your cloud account credentials.
-
In the upper-right corner of the page, click the Expand button next to the system role, and click Profile.
-
In the Multi-Factor Authentication section, select Disable MFA.
-
In the Disable MFA dialog box, click Yes, Disable MFA.
-
Input your MFA code and select Confirm.
Enable MFA for your DW user
If the owner of a DW service unit has not enabled MFA for the DW service unit, you can enable it for your DW user within the service unit to enhance the security of your information and data.
-
Sign in to the DW service unit console.
-
Click the expand button of your account information at the lower-left corner.
-
On the displayed menu, click Profile.
-
In the Multi-Factor Authentication section, click Assign MFA Device.
You can use your phone or other device as a virtual MFA device.
-
In the Configure Virtual MFA Device dialog box, perform the following operations as instructed:
a. Install a virtual authenticator app. For a list of compatible apps, see Compatible virtual authenticator apps.
b. Use the app to scan the QR code displayed. If you prefer, click Copy Secret Key to manually enter the key into your app.
c. Enter your MFA code.
-
Click Assign MFA.
-
In the Assign Confirmation dialog box, enter your MFA code and click Confirm.
Disable MFA for your DW user
Only when MFA is enabled by yourself, not the owner of the DW service unit, you can disable MFA.
-
Sign in to the DW service unit console.
-
Click the expand button of your account information at the lower-left corner.
-
On the displayed menu, click Profile.
-
In the Multi-Factor Authentication section, click Disable MFA.
-
In the Disable MFA dialog box, click Yes, Disable MFA.
-
Input your MFA code and select Confirm.
Replace a virtual MFA device
You can replace your MFA device as necessary, depending on your current device's status.
If your current MFA device can receive MFA code, perform the following:
-
Sign in to the Relyt console with your cloud account credentials.
infoIf you're replacing the MFA device for your DW user, sign in to the DW service unit console as the DW user instead.
-
In the upper-right corner of the page, click the Expand button next to the system role, and click Profile.
-
In the Multi-Factor Authentication section, click Change MFA Device.
-
In the Change MFA Device dialog box, enter your MFA code, click Confirm, and then assign a MFA device again.
If your current MFA device is lost or broken, perform the following:
-
During sign-in, click Unable to receive the MFA code in the Verify MFA dialog box.
-
Follow the instructions provided in the console:
a. Contact the main account holder to start a Update Credentials task for your current account.
b. Check your email and complete the Update Credentials process.
-
If MFA is enabled organization-wide, you need to reconfigure a virtual MFA device during the Upgrade Credentials process.
-
If MFA is disabled organization-wide, after completing the Update Credentials process, you can assign a MFA device again.
-
Compatible virtual authenticator apps
You can download virtual authenticator apps from your device's app store. Many providers also offer web and desktop versions for added convenience.
We recommend considering the following apps: