Set up multi-factor authentication
Multi-factor authentication (MFA) requires more than one way to authenticate a user. Factor means the way to prove a person is who they say they are, such as using a password. Adding a second or more factor makes authentication more secure, such as sending a code to your phone or email, or requiring an authentication app that you verified during your account setup.
Important
You can use MFA if you do not use a single sign-on (SSO) connection with your organization. If your organization uses SSO to log into Opti ID and you want MFA as part of your login flow, you need to set it up with your own identity provider. For customers currently using local logins with MFA enabled, switching to SSO will disable MFA.
Enable MFA
As an administrator of your organization:
- Go to https://login.optimizely.com. The home dashboard displays.
- Click Optimizely Admin Center.
- Go to Settings > Authentication > SSO to show your options. If you have an SSO setup, be aware that you cannot adjust your MFA settings:
- Toggle the switch to enable or disable MFA (only available for local login). This change may take a few minutes to complete.
Initial login with MFA
After you enable the MFA toggle, users are required to set up MFA upon sign-in.
- Sign in as usual.
- Click Next to input the user password.
- Click Verify. If a user has not yet set up MFA, the following displays.
- Following the on-screen instructions, click Set up to download and install Okta Verify and scan the QR code on the page with your phone.
- After Okta Verify is set up, you can set up an additional phone factor. (You can click Set up later to opt out of this and log into Opti ID.)
- If you choose to set up a phone, provide a number.
- Click Receive a code via SMS. You will receive a 6-digit code through SMS to input into the next page.
Note
SMS messages may come from long-code numbers, short-code numbers, or a friendly-name contact, depending on your region.
- Click Verify. Your phone is now set up as an additional factor for authentication. You are then logged into Opti ID.
Returning login with MFA
Returning MFA users log in as usual with their email and password. After you input their password, you are prompted again for your Okta Verify code.
