Two-Factor Authentication (2FA) Administration

This article is solely for customers whose accounts have not been upgraded to use Identity. Identity allows each user to administer their multi-factor authentication configuration.

This article is meant to teach a CDN administrator how to enable two-factor authentication for MCC access.
Learn how to set up or modify your own 2FA configuration.

Two-Factor Authentication (2FA) requires users to provide a 2FA token when logging into the MCC. This extra layer of security protects your CDN configuration from being accessed/modified by unauthorized users.

2FA only applies when logging in to the MCC. It does not affect other instances under which MCC credentials are required, such as the SFTP, FTP, or rsync.

This section covers the following administrative tasks:

• How to enable/disable 2FA on each user's account
• How to reset a user's 2FA configuration

Enabling and Disabling Two-Factor Authentication

Set up 2FA when creating or modifying a user account.

To configure 2FA on a user account

1. Navigate to the Users page.
2. Click on the desired user account.
3. Click More Details ∨ to expand it.
4. Set the Two-Factor Authentication option to enabled (i.e., blue) or disabled (i.e., gray).
5. Click Save.

Resetting a User's Two-Factor Authentication Configuration

Although users can reset their own 2FA configuration from their profile, there are certain circumstances under which an administrator may need to reset it on their behalf. For example, intervention is required when a user is locked out of the MCC due to an inability to generate a 2FA token. Once a user's 2FA configuration has been reset, that user will need to configure it upon successfully logging in to the MCC.

Update a user's mobile phone number when that user is locked out due to a new phone number.

Learn about phone number format.

To update a user's mobile phone number

1. Navigate to the Users page.
2. Click on the desired user account.
3. Click More Details ∨ to expand it.
4. If the Mobile option is not expanded, click it.
5. Set the Mobile option to the phone number to which 2FA tokens will be sent for the selected user account.
6. Click Save.

A user will only receive 2FA tokens via a mobile device when 2FA has been configured to leverage SMS messaging.

To reset a user's 2FA configuration

1. Navigate to the Users page.
2. Click on the desired user account.
3. Click More Details ∨ to expand it.
4. Click Clear Two-Factor Authentication Key from the Two Factor Authentication section.