Multi-factor authentication protects MOVEit Transfer accounts from unverified users when a user's account password is lost, stolen, or compromised. To verify user identity, MOVEit Transfer gives users private access to a uniquely-generated verification code (made available to the user by email or mobile app). This additional verification step ensures user sign on is genuine.

Before you begin, you will need either a personal email account or a smartphone. Either can serve as an additional identification source.

• Smartphone authentication. Install a third-party authenticator app to your phone, scan in the QR code that MOVEit Transfer generates for you, and get your temporary PIN.
• Email authentication. MOVEit Transfer sends a temporary PIN to an email account registered with your MOVEit Transfer user account.

Note: SAML session users are not prompted for additional verification methods associated with multi-factor authentication.

If you opt to verify your identity using your smartphone or mobile device, you will need an authenticator app on that device.

Supported Authenticator Apps

MOVEit Transfer works with authenticator apps such as Google Authenticator, which is available from most app stores including iTunes and Google Play.

After you install and open your authenticator, you will need to Scan the QR Code.

Tip: MOVEit Transfer is compatible with authenticator applications like Google Authenticator that implement RFC 6238 (Time-Based One-Time Password) and RFC 4226 (HMAC-Based One-Time Passwords).

When you generate a temporary PIN using the QR code, it is like sharing a secret about your account that only you and MOVEit Transfer know. The QR code (or, alternatively the text key) is used to spawn a temporary PIN for you.

Before you begin, you need an authenticator app installed on your smartphone or mobile device.

 

1.	Scan the QR Code	Open an authenticator app (Google Authenticator or equivalent) on a trusted device. Choose 'add' , then choose Scan a Code .
2.	Get the Generated Verification Code	The authenticator app generates a temporary PIN for MOVEit Transfer. This PIN is your verification code. Authenticator apps refresh the temporary PIN automatically. It is best to use it right away.
3.	Enter the Verification Code	Type the verification code into the Enter Verification Code text box and click Verify.
	The multi-factor handshake is complete.	You verified your identity to MOVEit Transfer by two distinct methods.

Use the Text String Key (Can't Scan the Code)

If your smartphone is low on charge or its camera does not work, you can share the shared secret with the authenticator app as a string of characters.

1. Click Show key link.

   MOVEit Transfer presents the text string key you can use instead of the bar code.

2. On your smart phone or mobile device, with Google Authenticator open, click '+' and then chose Enter a provided key.
3. Type the key displayed by MOVEit Transfer into Google Authenticator.

   Google Authenticator generates your temporary PIN. This is your MOVEit Transfer Verification Code.

Step 1: Get the Initial Verification Code

There are two scenarios where MOVEit Transfer will prompt you to check your email account for a verification code:

• User opt in. You click on Enable to add email as an available method for identity verification (My Account - Multi-Factor Authentication) using the currently configured email address.
• Site Policy. Your administrator turned on multi-factor authentication and you receive an initial setup message at sign on.

Step 2: Provide the Code Back to MOVEit Transfer (one of the following)

Scenario 1: User Opts In. When you opt in to use email as a factor, MOVEit Transfer sends you an initial email to verify your account directly.

Scenario 2: Email as a Factor is Site Policy. If a MOVEit Transfer administrator requires email as a second method of identity verification, MOVEit Transfer sends you an email to verify your account. The email is sent at your first sign-in attempt after the site policy is implemented.

To edit the email address where you receive notifications:

1. In the top banner, click MY ACCOUNT, locate the Edit Your Email Settings... section.
2. Provide the following information:
   • Email Address(es). Type an email address where you want to receive new package and new file notifications. To specify multiple addresses, separate each with a comma.
   • Preferred Email Format. The format for notification emails that you receive. Select HTML or Text
3. Click Change Email Settings.

   Important! When multi-factor authentication is enabled, MOVEit Transfer will use the first email address listed as a destination for your verification code. (Given that email was selected as an Available Method.)

At sign in, provide your temporary verification code generated from the authenticator app installed on your smartphone or mobile device.

Smartphone or Mobile App

1. Open your authenticator app and scroll to the verification code for MOVEit Transfer.

   If you opt to verify your identity using your smartphone or mobile device, you will need an authenticator app on that device.

   Supported Authenticator Apps

   MOVEit Transfer works with authenticator apps such as Google Authenticator, which is available from most app stores including iTunes and Google Play.

   After you install and open your authenticator, you will need to Scan the QR Code.

   Tip: MOVEit Transfer is compatible with authenticator applications like Google Authenticator that implement RFC 6238 (Time-Based One-Time Password) and RFC 4226 (HMAC-Based One-Time Passwords).

2. Type the verification code generated from your mobile app into the Enter Verification Code text box, then click Verify.

   You verified your identity to MOVEit Transfer by two distinct methods. The multi-factor handshake is complete for this session.

Note: If your smart phone or mobile device is without power or unavailable, you can verify your identity using your MOVEit Transfer-registered email account.

Email

At sign in, provide your temporary verification code sent to your secure email address.

1. Get the verification code sent from MOVEit Transfer to your email account.
2. Type the verification sent to you from MOVEit Transfer into the Enter Verification Code text box, then click Verify.

   You verified your identity to MOVEit Transfer by two distinct methods. The multi-factor handshake is complete for this session.