Step-by-step guide to setting up the 2-factor authentication in FLOW Portal

This is an automated translation and may therefore contain translation errors or differ from reality in details

What is 2-factor authentication (background information)?

2-Factor Authentication (2FA) is an electronic authentication method where users can only access the application after providing two answers (factors) to prove their identity. It is mainly used to ensure that user data is protected and secured. A third-party authentication app enables two-factor authentication, usually by displaying a randomly generated and frequently changing code to be used for authentication.

Where is 2FA used at TIE Kinetix?

By default, the FLOW portal supports setting up 2FA using the Google Authenticator app (or using SMS if enabled by the project). The setup and use of the 2FA can be optional or mandatory, depending on the project the users are logging into.

How do you set the 2FA in FLOW?

There are two locations where you can set up your 2FA in FLOW: in "My profile" and in the "login" page

1- In "My Profile":

In the event that the project does not enforce setting up the 2FA, setting it up is not mandatory, and you can optionally choose to protect your account by using this available functionality.

There are two different methods supported by FLOW: via the Google Authenticator app (default) and via SMS (specific projects).

• With the Google Authenticator app:

Before you start, install the Google Authenticator app on your mobile phone.

Google play: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en&gl=US

iOS app: https://apps.apple.com/us/app/google-authenticator/id388497605.

Make sure the clock on your phone is synchronized with that of the computer. Because the PIN has to change every minute, even a one-minute shift is not acceptable for Google Authenticator.

Then log in to the portal of the project and follow the next steps:

1- Click on the user icon (top right icon - far right)

2- click on the link "My Profile"

3- click on the "Security" section

4- activate the toggle of "Two Factor Authentication"

5- type your recovery email (note: this is an important step, because if you need to set your password, you will need to provide the recovery email you enter in this step). This email address cannot be the same as your username.

6- click the "Register with Google Authenticator APP" button.

7- In the Google Authenticator App on your mobile phone, click on the plus (+) sign to add a site (the + becomes a ✕) and then on "Scan QR code"

8- Scan the code shown after clicking the "Register with Google Authenticator APP" button with your phone (not the code in this manual)

9- enter the 6-digit code

10- click on the "Validate PIN Code" button

11- click the "Close and refresh the page" button.

Once you have completed the installation, a notification will appear when you log into the portal asking you to enter the 2FA code. You can then find the code in the app on your mobile phone.

It's good practice, if you use the Google Authenticator app as 2FA for multiple sites or portals, to rename it in your Google Authenticator app. You can do this by long pressing the PIN code entry in your phone and renaming it.

• By SMS:

Some projects support setting up your 2FA using the SMS. If this option is not listed, it is not available for this project/customer. You can then only use 2FA via the Google Authenticator app. See above for instructions.

For 2FA via SMS you can first apply steps 1 & 2 as mentioned for the Google Authenticator app --> then make sure you have entered your mobile phone number in the personal details in your profile and click on "Save" and then finish steps 3-5

6- In the Authentication Type drop down options, select SMS

7- Click on "Send me a verification SMS".

8- Enter the code sent to your mobile phone, then click "Close and refresh the page".

2- In the "login" page:

If the project enforces the setting of the 2FA, setting it is mandatory. You will then not be able to access the FLOW portal of the project before you have set up the 2FA.

You can set up your 2FA after the first login by using the same steps mentioned above after you see this screen: