If a user loses access to their Multi-Factor Authentication (MFA), administrators can reset MFA through Outstaffer’s Company Settings to restore account access. This guide provides a step-by-step process to securely reset MFA.
When Should You Reset a User’s MFA?
Reset MFA only when necessary, such as:
Lost or Replaced Device: The user no longer has access to their registered authentication app.
Authentication App Issues: The app is malfunctioning or was uninstalled accidentally.
Forgotten Recovery Code: The user did not save their recovery code and is locked out.
Security Concerns: The user suspects their account has been compromised.
Important: Resetting MFA removes the existing authentication setup, requiring the user to re-enroll in MFA before logging in again securely.
How to Reset MFA for a User
Follow these steps to reset a user’s Multi-Factor Authentication (MFA) in Outstaffer:
Step 1: Navigate to Settings
Log in to your Outstaffer Admin Panel.
Click on Settings from the menu.
Select Company Settings.
Step 2: Access User Permissions
Click on the User Permissions tab.
Locate the user’s name in the list.
Step 3: Reset the User’s MFA
Click on the ellipsis (three dots) next to the user’s name.
Select “Reset MFA” from the dropdown menu.
Confirm the reset action. This will remove the current MFA setup and require the user to re-enroll.
Step 4: Notify the User & Guide Them to Re-Enroll
Inform the user that their MFA has been reset.
Provide them with instructions to set up a new authentication method.
What Happens After Resetting MFA?
The old MFA setup is removed, and the user must set up a new authenticator app.
The user will be prompted to scan a new QR code using an authenticator app like Google Authenticator, Authy, or Microsoft Authenticator.
The user will receive a new recovery code. They should store it in a safe place.
Once set up, the user can log in again using their new MFA configuration.
Troubleshooting & Common Issues
If a user experiences issues after MFA has been reset, consider these solutions:
User Cannot Receive MFA Codes?
Try this:
Ensure the user has set up their new authentication app and entered the correct code.
Verify that their device’s date and time are set correctly (important for code synchronization).
User Still Locked Out?
Try this:
Double-check that MFA was properly reset in the admin panel.
If issues persist, contact Outstaffer Support for further assistance.
Outstaffer’s Commitment to Security
Resetting MFA is a critical security measure and should only be done when absolutely necessary. Encourage users to:
Use an Authenticator App: Apps like Google Authenticator, Authy, or Microsoft Authenticator provide better security than SMS 2FA.
Store Recovery Codes Securely: This helps users regain access without requiring an MFA reset.
Enable MFA on Other Services: Encourage them to secure email, cloud storage, and work-related accounts.