Two-Factor Authentication (2FA)

Administrator permissions are required to access this feature.

Configure Two-Factor Authentication

Two-Factor Authentication (2FA) settings apply to all users in your tenant.

1. In the lower-left corner of the main screen, click the Administration cog icon.
   The Administration menu appears on the left side.
2. Under Access Control, click Two-Factor Authentication (2FA).
   The Two-Factor Authentication (2FA) page appears.
3. On the right side, click Edit Settings.
   The Edit Two-Factor Authentication Settings dialog box appears.

Edit Two-Factor Authentication Settings

Specification	Description	Options
Two-Factor Authentication	When enabled, two-factor authentication requires users to enter a time-based one-time password (TOTP) as part of their login process.	Enabled Disabled
TOTP Hash Algorithm	Select the hash algorithm to use for the TOTP. LogRhythm supports Google Authenticator for SHA1 and Free OTP for SHA256 or SHA512.	SHA1 SHA256 SHA512
TOTP Token Period	The time interval that a TOTP remains valid. When the time interval expires, a new TOTP is generated by the token generator.	Enter the desired time interval in seconds.

Reset a 2FA Device

1. In the lower-left corner of the main screen, click the Administration cog icon.
   The Administration menu appears on the left side.
2. Click the user display name for the user account with the 2FA device you want to reset.
   The user account page appears.
3. On the upper-right side of the screen, click Actions, and then click Reset 2FA Device.
   A confirmation dialog box appears requiring you to complete the action or cancel the action.

4. To reset the 2FA device, click Reset.
   The 2FA device is reset, and the user must re-enroll in 2FA during their next login.