• Home
• Customize MFA for end users

Customize MFA for end users

---

This guide explains how to configure and manage Two-Factor Authentication (2FA) settings in the miniOrange Admin Console. It walks through the steps to set up 2FA methods, assign default and allow authentication options for end-users, and enable advanced security features such as biometric authentication and QR code delivery. Admins can enhance login security by selecting from a variety of 2FA methods including OTPs, authenticator apps, hardware tokens, and more. Additional notes are provided for settings that have been moved to other product configuration sections.

miniOrange Supports Multiple 2FA Methods for Secure Authentication

Method	Description
OTP over SMS	Instantly receive OTP on mobile through secure SMS delivery.
OTP over Email	Get OTP securely via email for quick verification access.
Google Authenticator	Generate time-based OTPs using the Google Authenticator mobile app.
Authy Authenticator	Authy generates TOTP codes across devices for secure authentication.
QR Code Authentication	Scan QR code for fast, secure, and passwordless authentication.
Display Token	Hardware device generates OTPs for secure user authentication login.
SMS link	Receive OTP on both SMS and email for enhanced security.
Email link	Get a secure login or verification link via your email.
Microsoft Authenticator	Generate OTPs and approve logins using Microsoft Authenticator app.
Soft Token	A software-based OTP generator for secure authentication on mobile or desktop devices.
OTP or Phone Call	Receive your one-time password (OTP) through a secure automated phone call.
Security Questions	Answer predefined personal questions to verify your identity during login or recovery.
OTP over SMS and Email	Receive OTP on both SMS and email for secure dual verification.
Microsoft Push	Approve sign-in requests with secure Microsoft push notifications instantly.
Push Notifications	Instantly receive login approvals via secure mobile push notifications.
YubiKey Token	Hardware key provides strong 2FA with a simple touch.
FIDO2(Biotric)	Authenticate securely using biometrics with passwordless FIDO2 technology.

Setup 2FA for End Users

• Login to miniOrange Admin Console.



• Navigate to 2-Factor Authentication >> 2FA Options for EndUsers.

Customize your Two-Factor Authentication (2FA) settings. Choose from various methods to enhance your account security and convenience.

• Default Authentication Method
• Allowed 2FA Method
• Advance Options Method

• Select the default authentication method that will be automatically set for the user during the login process.

• Choose which two-factor authentication (2FA) method you want to allow users to choose from.

• Enable users to choose and configure their preferred 2FA method, including biometric and QR-based options, for secure authentication.
• Select the 2FA Method at the time of Login:

  Turn on this option to let users select their preferred 2FA method during the login process for enhanced flexibility and security.

• Send Authentication QR code via Email:

  Turn on this setting to email users the Authenticator QR code during onboarding, allowing them to activate their chosen Authenticator as their MFA method easily.

• Select Authenticator:

  In the 2FA Options for End-Users section, you can select a preferred authenticator for two-factor authentication. Use the 2FA Options for End-Users dropdown to choose from the available options:





• miniOrange Authenticator Biometric Setting:

  Activate this option to mandate biometric authentication for users in Push Notifications using the miniOrange Authenticator app.

  
  
  

• Click on Save.