Once Two-Multi Factor Authentication (2FAMFA) has been enabled for your company, Employee User Accounts will need to use an authenticator to log into all web portals (ESS / DA and the MyPay mobile application).
...
The below guide has been split into two sections:
| Table of Contents |
|---|
Registration (First Login)
Unlike Non-Employee Users, Employee Users can choose between using an authenticator (such as Authy) or the MyPay application as their second layer. If they opt to use MyPay they will receive a push notification from the app when they attempt to log in to ESS / DA. If logging into MyPay the app uses the physical phone as the second layer, meaning users only have to enter their PIN as they did before.
Upon logging to a web portal (ESS / DA or MyPay) for the first time after 2FA MFA has been enabled, your employees will be greeted by the following screen with the option to choose either MyPay or an authenticator. The option to skip is only offered once, and users will not be able to log in a second time without setting up their account for use with 2FAMFA.
At this point the Registration section is split between using an authenticator or MyPay
Selecting to Register with an Authenticator
After selecting "Log in with an authenticator" users will be taken to the below page to start the process of registering with 2FAMFA. They will be required to download a 3rd party authenticator - this can either be a mobile phone app, or a desktop application. Common options are Authy or Google Authenticator, however if they already have another authenticator app installed they should be able to use this as well.
...
Once complete, they will be shown a final screen indicating that the process has been successful.
Selecting to Register with MyPay
If an user selects to register with MyPay they will need to have their mobile device handy. There are some important things to note when registering with MyPay authentication. Once registered:
...
Employees will then need to open MyPay on their mobile device, and sign in as normal. Upon successful sign in, they will be greeted by a 2FA an MFA welcome screen which explains some of the restrictions and useful information.
Selecting 'Next' will ask them to confirm they wish to continue registering this device for use with 2FAMFA.
Once they have registered the device as above, heading back to their browser they will see the page change and will show the details of the mobile device they just set up for use with 2FAMFA.
A push notification will be sent to the newly setup device to approve the setup and complete the registration process. The notification can either be viewed and approved from inside the MyPay app of from the the the home screen / outside the app. Both options are shown below.
...
Once complete, they will be shown a final screen indicating that the process has been successful.
Subsequent Logins
Logging in using an Authenticator
After entering their username and password into a web portal (ESS / DA) they will be shown the below screen:
...
They will be provided with the option to have their browser remembered for the day. If selected, during the current day they will not need to use the authenticator to log in to the web portal. On the following day they would then be prompted to use the authenticator to log in again, and be given the option to be remembered for that day.
Logging in using MyPay
After entering their username and password into a web portal (ESS / DA) they will be shown the below screen:
...