Multi-Factor Authentication
Thwart 99.9% of unauthorized login attempts without bogging down your users by enabling passwordless MFA on your app.
Adding multi-factor authentication to your project is a breeze with Swoop's out-of-the-box solutions. You can enable MFA in a couple of steps.
Swoop currently offers two different MFA strategies (with more on the way!):
• SMS
• Pin Pad
Configuring SMS
To get started, enable the MFA toggle and select SMS from the list of available MFA service options.
Configuring SMS MFA
The next step will require a Twilio account, which will manage your account phone number and SMS delivery. Copy and paste the following credentials from your Twilio account into the appropriate configuration fields as noted:
• Account SID
• Auth Token
• From Phone Number
Hit "Update MFA Settings," and you're good to go with an SMS second factor. You are now ready to test SMS MFA. For more details about the front-end-user experience with SMS MFA, you can view our front-end walk through here.
Configuring PIN Pad
To get started, enable the MFA toggle and select PIN Pad from the list of available MFA service options.
Configuring Pin Pad MFA
Click "Update MFA Settings," and you're good to go with a PIN second factor. You are now ready to test PIN Pad MFA. For more details about the front-end-user experience with PIN Pad MFA, you can view our front-end walk through here.
MFA User Reset
In the event that a user gets locked out of their account, they will be prompted to contact your organization for an MFA reset. This could happen when a user forgets their PIN or no longer has access to the phone number they originally connected to their email address.
To get started, head over to the MFA page within the application that you need to perform a user reset. Search for the email address the user is attempting to authenticate with. Click "Reset." Upon their next authentication, that user email will be prompted to restart the MFA configuration process.
Updated 8 months ago