For users with a Single Sign-on (SSO) account advanced security features like 2FA are handled by your SSO provider.
There are two ways you can be enrolled for two-factor authentication (2FA):
Your organisation has made it mandatory for you to use 2FA and you will need to set it up the next time you log in to the web app.
You go into your My settings and have either asked to enrol in 2FA or reset your existing 2FA setup.
Either option will take you through the 2FA enrolment process.
Two-factor authenticator app
Before you begin you must have access to an authenticator app that will provide your 2FA codes when logging in. While any standard authenticator that generates 6-digit codes should work, we recommend using Google Authenticator:
Registering for 2FA
It's usually easier to register for 2FA using your PC. This will allow you to use your phone's camera to register.
You will be presented with a QR code on-screen:
Open your authenticator app, and select Add - this should open the camera in the app.
Scan the QR code on your PC screen using your phone's camera.
Depending on your authenticator app you may be asked to provide a description.
Once added to your authenticator app, it will display a six-digit code. This code is regenerated automatically every 30 seconds, and most authenticator apps will show a count-down of how long this code will remain valid.
Type the code from your authenticator app into the box below the QR code then hit Verify - you will have an additional 30 seconds to perform this step before your code will be rejected.
After verification you will be presented with your backup codes - these can be used to login to the web app in an emergency (e.g. you have lost your phone with the authenticator app) where you can reset your 2FA and register a new authenticator app. It is recommended to download these and keep them safe:
Once you've verified the code then 2FA will be enabled on your account - you'll now be asked to enter a six-digit 2FA code after entering your username and password when logging in.