Multi-Factor Authentication (MFA) Setup

Add an extra layer of security to your clariBI account.

MFA Overview

What Is MFA?

MFA requires two forms of verification:
1. Something you know (password)
2. Something you have (phone/app)

Availability

MFA is available on Professional and Enterprise plans.

Supported Methods

• TOTP App: Google Authenticator, Authy, etc.
• Backup Codes: One-time recovery codes

Setting Up MFA

Step 1: Access Security Settings

1. Click your avatar
2. Go to Settings > Security
3. Find Multi-Factor Authentication

Step 2: Enable MFA

1. Click Enable MFA
2. Enter your password to confirm
3. Choose authentication method

Step 3: Configure TOTP App

1. Install authenticator app on your phone:
   - Google Authenticator
   - Authy
   - Microsoft Authenticator
2. Scan QR code with app
3. Enter 6-digit code to verify
4. MFA is now active

Step 4: Save Backup Codes

1. Copy your backup codes
2. Store in secure location
3. Each code works once
4. Use if phone unavailable

Using MFA

Login Process

With MFA enabled:
1. Enter email and password
2. Open authenticator app
3. Enter current 6-digit code
4. Access granted

Code Timing

• Codes change every 30 seconds
• Enter code before it expires
• If expired, wait for next code

Managing MFA

View MFA Status

In Security settings:
- MFA enabled/disabled
- Date enabled
- Methods configured

Regenerate Backup Codes

If codes are used or compromised:
1. Go to Security settings
2. Click Regenerate Backup Codes
3. Enter password
4. Enter current TOTP code
5. Save new codes securely

Disable MFA

If needed:
1. Go to Security settings
2. Click Disable MFA
3. Enter password
4. Enter current TOTP code
5. MFA removed

Recovery Options

Lost Phone

If you lose your authentication device:
1. Use a backup code to log in
2. Each backup code works once
3. Re-setup MFA with new device

No Backup Codes

Contact support:
1. Email from registered address
2. Verify identity
3. Admin can reset MFA

Organization MFA Policies

For Administrators

Enforce MFA for all users:
1. Go to Organization > Security
2. Enable Require MFA
3. Set enforcement date
4. Users prompted to enable

Monitoring Compliance

View MFA status:
- Team page shows MFA status
- Export compliance report
- Identify non-compliant users

Best Practices

Setup

• Enable MFA immediately
• Use reputable authenticator app
• Store backup codes offline
• Don't share codes

Ongoing Security

• Keep phone secure
• Update authenticator app
• Review backup codes periodically
• Report suspicious activity