MULTI FACTOR AUTHENTICATION   

Multi-factor authentication (MFA) is a security process that requires users to provide two factor verification to access an application. MFA enhances security by adding an extra layer of protection beyond just password, but also a second form of verification, like a code sent to your Mobile number.

PRE-REQUISITES  

Updating Valid Backup Contact Details

• Ensure if the Administrator has the valid Mobile no. and E-Mail Id mapped against the Add-on Services screen and that they are active.

• Before Enabling MFA for all the users, ensure that each Mobile number and E-mail Id should be unique for all the users.

• If a user has not updated the contact details, the user may not be able to proceed MFA setup as the screen prompts the user to contact the administrator.

• Then the administrator need to update valid details in the Employee Master screen against the user name and may need to logout the user.Follow this link for Employee Master creation- https://help.true-pos.com/Security.html

Authenticator Application

    Ensure that authenticator application Zoho OneAuth (any other alternate app like Google Authenticator, Microsoft Authenticator, Auth can also be used) is downloaded and signed in successfully in the user's Mobile phone.

• For Android Users, Use Play Store app to download OneAuth application.

• If you are an iPhone user, then open App Store and download OneAuth application.

What are the Options available in MFA Status?  

• None (By Default MFA Status was None for all the users)-

• When the Administrator Set the MFA Status as 'None', then MFA Setup not required. Once Login successful, then redirect  to TruePOS Dashboard.

• Mandatory :

• When the Administrator Set the MFA Status as 'Mandatory', then for all the users By default MFA Set Up was  Mandatory. 

• Optional :

• If Admin Kept MFA Status as 'Optional', then admin have access to set MFA Status as Enable/Disable in Employee Master screen against the User. So that user can able to login based on the MFA Status.

• Disable - If MFA Status was Disable for that user, MFA Setup Page was not displayed.You can re-direct to TruePOS Dashboard Page.

• Enable - If MFA Status was Enable for that user, MFA Setup Page will displayed. For every login TOTP(Time-based One Time Password) will ask.

How does MFA Work in  TruePOS?  

Step 1 : After login with valid Username and Password, the MFA Notification page appears.

How to Set MFA Status set to 'Mandatory'?  

Step 1: Once close the Banner, Go to Tools--> More--> Click Add On Services.

Step 2 : In MFA Tab,  Set the MFA status to Mandatory and Click Save.

Step 3: When user re-login, MFA Setup Page will displayed. Then Click Agree and start to do MFA Setup.

Step 4: On clicking Agree, Backup Recovery Details(Mobile No & E-Mail) the relevant information based on the Add-on services will be displayed. Once Verified,then click the Proceed button.

Step 5: Based on the given number, OTP is sent to E-mail or phone number(based on country code) to verify the authenticity of the user. If you was an Indian Customer, you will get OTP for your Mobile Number. For Foreign Customers, you will get OTP via E-Mail.

Step 6 : On providing the correct OTP , MFA Setup Process begins (On providing invalid OTP attempts for more than 5 times , the user will be logged out). Now you have to open Zoho OneAuth application.

Note: If you don't have any Authenticator app, install Zoho OneAuth via Playstore/ Appstore.

Step 7: Go to the Authenticator Tab, Click + icon on the Top Right corner,Scan the QR Code on your Mobile and Click .

Step 8: After Scanning,OneAuth will prompts to Secret Key Page.Click 'Done'.

Step 9: Once account manually created,then app will generate TOTP (Time-based one-time passwords). Click 'Done'.

Step 10 : Enter the generated TOTP for authentication and click 'Verify'.

Step 11 : After successful TOTP verification, the user is prompted to  Generate Backup Codes. Upon clicking 'OK', the backup codes are downloaded to the local device if the setup is done for the first time. Once MFA Setup successfully completed, you will redirect to Truepos application.