Enabling Multi-Factor Authentication (MFA) – Phoenix Software Inc.

This article explains how email-based MFA works on the Phoenix SaaS platform and provides guidance for users who want to set up an authenticator app instead.

To improve account security, MFA is being enforced across our SaaS platform. Email-based MFA will be the default option, and most users will not need to take any action.

This article explains what to expect and how to optionally set up an authenticator app.

What is MFA and What Do I Need to Do?

Multi-Factor Authentication (MFA) adds an extra step when signing in by asking you to confirm your identity using something you have - such as a code sent to your email or an authenticator app. This helps keep your account more secure.

Email MFA will be automatically enabled for all users.

You only need to ensure:

Your username matches a valid email address you can access
You can receive email verification codes

No additional steps are required unless you want to use an authenticator app.

How Often Will I Be Asked for MFA?

Once you complete MFA on a device, the system will remember it for 30 days.
This means you won’t be prompted again on that device unless:

You clear your browser cookies
You switch to a new device
You use a new browser

Optional: Use an Authenticator App

If you prefer using an authenticator app (e.g., Microsoft Authenticator, Google Authenticator, or Authy), you can add it as a second factor.

To set it up:

Log into the SaaS application:
Go to Profile:
Select Security.
Under Two Factor Methods, click Set Up next to Authenticator App:
A QR code will appear.

Setting Up the Authenticator App

Open your authenticator app on your mobile device.
Select Add Account
Select Work or school account then tap Scan a QR Code.
Scan the QR code displayed in your Phoenix Solution and enter the 6-digit verification code to complete setup:

You will see a confirmation message once the authenticator app has been successfully added.

Logging In After Setup

If you have an authenticator app configured, you may be prompted to enter a 6-digit code when signing in.

If not, you will continue to receive verification codes via email.