Two-Factor Authentication (or 2FA) allows an administrative account to require all Merchant Portal users to complete an additional verification step when logging on to the portal. Only a user with admin permission can enable or disable 2FA. If enabled, 2FA is mandatory and system-wide, meaning that every user must complete the authentication; if it is not enabled, authentication is not required for anyone.

Enable Two-Factor Authentication

You must have an Admin account to access this setting.

1. In the Merchant Portal, go to Settings > User Accounts.

2. Toggle the Two-Factor Authentication setting on. By default, the setting is disabled.
   The setting takes effect immediately for any user not currently logged on to the system. For any user who is currently logged on, the change takes effect on their next log-on.

3. Click Submit.

Reset Two-Factor Authentication

You can reset two-factor authentication for individual users.

1. In the Merchant Portal, go to Settings > User Accounts.
2. Under the Users section, you can click the 2FA Reset button for a specific user. This option will only be available if the Two-Factor Authentication setting is enabled.

User Experience

Initial Log on

When Two-Factor Authentication is enabled, the following is the user experience the first time they attempt to log on:

1. The user enters their username and password and clicks Submit (as usual).
   A one-time setup screen opens.

2. The user must download the Google Authenticator app on their mobile device.
   Users can download the app through the link provided on the setup page, or in advance from the Google Play store or the Apple App Store.

3. Using the Google Authenticator app, the user scans the QR code and clicks Next.
   A 6-digit code is sent to the Google Authenticator app.

4. The user enters that code in the BlueSnap window and clicks Confirm.

Subsequent Log-ons

When Two-Factor Authentication is enabled, the following is the user experience every time they attempt to log on, after the initial setup:

1. The user enters their username and password and clicks Submit (as usual).
   A 6-digit code is sent to the Google Authenticator app.

2. The user enters that code in the BlueSnap window and clicks Confirm.

Disable Two-Factor Authentication

You must have an Admin account to access this setting.

1. In the Merchant Portal, go to Settings > User Accounts.

2. Toggle the Two-Factor Authentication setting off.

3. Click Submit.
   A confirmation screen opens.

4. Enter your password to confirm that you want to disable 2FA for all users.

5. Click Disable.
   The setting takes effect immediately for any user not currently logged on to the system. For any user who is currently logged on, the change takes effect on their next log-on.