Two Factor Authentication¶
Two Factor Authentication (also known as 2FA), allows you to add another layer of verification to the login process, requiring a second piece of information in addition to your email address and password in order to log in to Rational BI.
The purpose of 2FA is to make it more difficult for an attacker to gain control of your account by requiring a code that is only accessible via a second authentication device. Rational BI supports the use of an Authenticator app to implement two-factor authentication.
Rational BI supports two-factor authentication (2FA) through time-based one-time passwords (TOTP).
A time-based one-time password application automatically generates passwords that rotate after a certain period of time has passed. You can use any TOTP-compatible app, but Rational BI recommends using an app that synchronizes your codes to the cloud in case you lose your device such as:
- LastPass Authenticator
You can also use Apps such as Google Authenticator.
By requiring another layer of verification to access your account, there's an additional responsibility on the user to maintain access to their two factor authentication device.
Enabling two-factor authentication¶
To enable two-factor authentication, navigate to Two-factor Authentication in the menu in the user profile settings screens and click Enable Two-factor Authentication.
You will need to enter your password to continue. If you don’t have a password set, you’ll need to create one first.
You cannot set up two-factor authentication if you are logging in through Single Sign-On.
Consult your IT administrator for more information about how to secure your account.
Once you’ve entered your password, follow the instructions on-screen. Open your authenticator app and either scan the QR code or enter the codes that appear.
When the codes have been registered, enter one of the codes in the input box to demonstrate that you’ve registered the codes correctly.
Your two-factor authentication has now been set up.
Disabling two-factor authentication¶
To disable two-factor authentication, navigate to Two-factor Authentication in the menu in the user profile settings screens and click **Disable Two-factor Authenticatio**n. The functionality will be disabled after you have entered your password.