Contents x
    MFA (Multifactor Authentication)
    • 25 Sep 2024
    • 2 Minutes to read
    • Dark
      Light
    Contents

    MFA (Multifactor Authentication)

    • Updated on 25 Sep 2024
    • 2 Minutes to read
    • Dark
      Light
    Article summary

    OWL Software Edition Module or Feature Available In

    Whooster

    Standard

    Advanced

    Enterprise

    Enterprise Plus

    Enterprise Advanced

    Smart City

    In the realm of security, OWL distinguishes itself by offering three robust types of first-level multifactor authentication (MFA), each tailored to enhance the protection of user accounts and sensitive data. These authentication methods—Security Question and Answer, Time-based One-Time Password (OTP), and Facial Recognition—provide varying layers of security, ensuring that access to the OWL platform remains secure and reliable. Here’s an expanded look at each type of first-level MFA within OWL:

    1. Security Question and Answer: The Security Question and Answer method involves users selecting predefined security questions and providing answers during the initial authentication process. This method adds an additional layer of security beyond the password, requiring users to recall specific information that is not easily guessable or publicly available. Administrators typically configure a set of diverse security questions to cover various aspects of the user’s personal information or preferences, ensuring a personalized yet secure authentication experience.

    2. Time-based OTP (One-Time Password): Time-based OTP is another first-level MFA method offered by OWL, leveraging the use of OTPs generated at fixed time intervals. Users typically receive OTPs through a designated authentication application or device synchronized with OWL’s system clock. The OTPs are valid for a short duration (usually 30-60 seconds) and provide a time-sensitive second factor for authentication. This method enhances security by requiring possession of the OTP-generating device in addition to knowledge of the password, effectively mitigating risks associated with password theft or replay attacks.

    3. Facial Recognition: Facial Recognition represents a cutting-edge authentication method within OWL’s MFA arsenal, utilizing biometric technology to verify user identity based on unique facial features. Users enroll their facial biometrics during initial setup, and subsequent logins require a real-time facial scan for authentication. OWL’s Facial Recognition technology employs sophisticated algorithms to accurately match the user’s live facial scan with stored biometric data, ensuring a high level of security and user convenience. This method offers a seamless authentication experience without the need for additional hardware tokens or OTPs, enhancing user satisfaction while bolstering security measures.


    There are three types of first-level MFA present under OWL:

    • Security Question and Answer

    • Time-based OTP

    • Facial Recognition

    • Security Question and Answer: This is the default MFA set when the user is added to the organization. If this MFA is set the user has to answer the security answer after login with a valid username & password. The security answer is set by the user during the first login process.

    • If the security answer does not match it will not allow further login to OWL.  A screenshot of a computer  Description automatically generated

    • Time-based OTP: The admin can set the Time-based OTP at the organization level by selecting the “Time-based OTP” radio button on the security page. A screenshot of a computer  Description automatically generated

    • If the MFA is set to TOTP then the user must scan the barcode after the username & password login for the first time using Authy or Google Authenticator apps on their device. Next time during the login they can provide the TOTP generated in their device and use it to log into the application.

    A screenshot of a qr code  Description automatically generated

    A white background with black lines  Description automatically generated

    • Facial Recognition: If the security policy for the user is set to “Facial recognition” during the first login they must capture the image of the face. Next time when the same user logins it will verify the face and it will allow to log into the application.  A screenshot of a computer  Description automatically generated

    • First-level MFA setup can be done from the Organization level, Role-License level, and User level.

    • The User level MFA setup will be considered first, Then the Role and License level. If none of these settings are available for the user, then Organization level MFA will be given priority during login.

    Was this article helpful?
    What's Next
    ESC

    Eddy AI, facilitating knowledge discovery through conversational intelligence