Signing On with Multi-Factor Authentication

This section covers the following topics for managing and applying multi-factor authentication (MFA) to your MOVEit Transfer user account:

• Initial setup at sign on. Set up MFA for your account
• Self-opting MFA for your account. Turn MFA on/off (site specific)
• Signing in with alternative authentication methods. (Smartphone or email)

  Step 1: Get the Initial Verification Code

  There are two scenarios where MOVEit Transfer will prompt you to check your email account for a verification code:

  • User opt in. You click on Enable to add email as an available method for identity verification (My Account - Multi-Factor Authentication) using the currently configured email address.
  • Site Policy. Your administrator turned on multi-factor authentication and you receive an initial setup message at sign on.

  Step 2: Provide the Code Back to MOVEit Transfer (one of the following)

  Scenario 1: User Opts In. When you opt in to use email as a factor, MOVEit Transfer sends you an initial email to verify your account directly.

  

  Scenario 2: Email as a Factor is Site Policy. If a MOVEit Transfer administrator requires email as a second method of identity verification, MOVEit Transfer sends you an email to verify your account. The email is sent at your first sign-in attempt after the site policy is implemented.

  

  When you generate a temporary PIN using the QR code, it is like sharing a secret about your account that only you and MOVEit Transfer know. The QR code (or, alternatively the text key) is used to spawn a temporary PIN for you.

  Before you begin, you need an authenticator app installed on your smartphone or mobile device.

  If you opt to verify your identity using your smartphone or mobile device, you will need an authenticator app on that device.

  Supported Authenticator Apps

  MOVEit Transfer works with authenticator apps such as Google Authenticator, which is available from most app stores including iTunes and Google Play.

  After you install and open your authenticator, you will need to Scan the QR Code.

  Tip: MOVEit Transfer is compatible with authenticator applications like Google Authenticator that implement RFC 6238 (Time-Based One-Time Password) and RFC 4226 (HMAC-Based One-Time Passwords).

  

  1.	Scan the QR Code	Open an authenticator app (Google Authenticator or equivalent) on a trusted device. Choose 'add' , then choose Scan a Code .
  2.	Get the Generated Verification Code	The authenticator app generates a temporary PIN for MOVEit Transfer. This PIN is your verification code. Authenticator apps refresh the temporary PIN automatically. It is best to use it right away.
  3.	Enter the Verification Code	Type the verification code into the Enter Verification Code text box and click Verify.
  	The multi-factor handshake is complete.	You verified your identity to MOVEit Transfer by two distinct methods.

  Use the Text String Key (Can't Scan the Code)

  If your smartphone is low on charge or its camera does not work, you can share the shared secret with the authenticator app as a string of characters.

  1. Click Show key link.

     MOVEit Transfer presents the text string key you can use instead of the bar code.

  2. On your smart phone or mobile device, with Google Authenticator open, click '+' and then chose Enter a provided key.
  3. Type the key displayed by MOVEit Transfer into Google Authenticator.

     Google Authenticator generates your temporary PIN. This is your MOVEit Transfer Verification Code.

• Using trusted devices. (Enable MFA verification step to persist between sign ins)