Multi-Factor Authentication

Thwart 99.9% of unauthorized login attempts without bogging down your users by enabling passwordless MFA on your app.

Adding multi-factor authentication to your project is a breeze with Swoop's out-of-the-box solutions. You can enable MFA in a couple of steps.

Swoop currently offers two different MFA strategies (with more on the way!):

• SMS
• Pin Pad

Configuring SMS

To get started, enable the MFA toggle and select SMS from the list of available MFA service options.

Configuring SMS MFAConfiguring SMS MFA

Configuring SMS MFA

The next step will require a Twilio account, which will manage your account phone number and SMS delivery. Copy and paste the following credentials from your Twilio account into the appropriate configuration fields as noted:

• Account SID
• Auth Token
• From Phone Number

Hit "Update MFA Settings," and you're good to go with an SMS second factor. You are now ready to test SMS MFA. For more details about the front-end-user experience with SMS MFA, you can view our front-end walk through here.

Configuring PIN Pad

To get started, enable the MFA toggle and select PIN Pad from the list of available MFA service options.

Configuring Pin Pad MFAConfiguring Pin Pad MFA

Configuring Pin Pad MFA

Click "Update MFA Settings," and you're good to go with a PIN second factor. You are now ready to test PIN Pad MFA. For more details about the front-end-user experience with PIN Pad MFA, you can view our front-end walk through here.

MFA User Reset

In the event that a user gets locked out of their account, they will be prompted to contact your organization for an MFA reset. This could happen when a user forgets their PIN or no longer has access to the phone number they originally connected to their email address.

MFA User ResetMFA User Reset

MFA User Reset

To get started, head over to the MFA page within the application that you need to perform a user reset. Search for the email address the user is attempting to authenticate with. Click "Reset." Upon their next authentication, that user email will be prompted to restart the MFA configuration process.


Did this page help you?