Multi-Factor Authentication (MFA)
MFA provides additional log-in security by requiring a one-time code generated in an authenticator app on a mobile device each time a preparer logs in.
Enable and Disable MFA
Any user with Admin rights may change a preparer's account to require MFA.
- From the homepage of Drake, select Setup > Preparer(s).
- Double-click on the preparer or select the preparer and click Edit Preparer.
- In the Login Information section of the Preparer Setup, select the checkbox to the right of Enable Multi-Factor Authentication (MFA).
- A confirmation dialog will ask if you would like to enable MFA.
- Click Yes to enable or No to return to the Preparer Setup screen without making changes.
- If Yes is selected, a dialog confirms that MFA is enabled for this preparer and they will complete MFA setup the next time they log in.
- Click OK.
Any user with Admin rights may change a preparer's account to no longer require MFA.
- From the homepage of Drake, select Setup > Preparer(s).
- Double-click on the preparer or select the preparer and click Edit Preparer.
- In the Login Information section of the Preparer Setup, deselect the checkbox to the right of Enable Multi-Factor Authentication (MFA).
- A confirmation dialog will ask if you would like to disable MFA.
- Click Yes to disable or No to return to the Preparer Setup screen without making changes.
- If Yes is selected a dialog confirms that MFA is disabled for this preparer.
- Click OK.
Log In with MFA
The preparer may use any authenticator app on their mobile device (e.g. Google Authenticator, Authy, Duo Mobile, etc.).
- When the preparer logs in for the first time, they will see a dialog box displaying a QR code and instructions on setting up their MFA.
- To set up their MFA, preparers will scan the QR code with the authenticator app, then enter the code generated by the authenticator app.
- Each time a preparer logs into the software after setting up their MFA, a current code (generated by the authenticator app) is required.
Note
• The code needs to be entered within 30 seconds or the code will expire.
• If the code expires, a new code will automatically be generated by the authenticator app.
• If the incorrect code is entered, an error dialog box will appear.
• If the correct code is entered, but the error dialog box appears, there may be a difference between the time on the mobile device and the time on the computer.