Multi-factor authentication for the web app

Multi-factor authentication, or MFA, offers extra security to your login and usage of AlayaCare Cloud ("ACC"). To provide additional security, your agency may require you to authenticate with a one-time code upon login. If MFA is enabled for your agency, you will be asked to enter a code every time you login to the app. 

What is available for MFA on ACC:

• One Time Password (OTP) via an authentication app
• One Time Password (OTP) via email

Prerequisites

• Your environment must first have Keycloak enabled. Please log an AlayaCare support ticket if you have yet to enable Keycloak and its features for your agency. 
• Users in all roles within the agency needs to have a valid email address so they can receive a One Time Password by email, should they choose to authenticate via email. Please make sure teams who may be sharing one email address as login know about this restriction. 
• A system admin at your organization must first enable MFA for the entire agency. Refer to the below instructions.

OTP Authenticator Application

At the login screen, the user will need to enter their username and password on the log in screen and click on “Sign In”. You will then be asked to set up a One Time Password using an authentication app such as Google Authenticator, Duo Mobile, LastPass Authenticator. Install this app on your mobile device, then open it. Use the app's scan or "+" button to scan the QR code displayed in the ACC login screen, as shown below. 

Once the authenticator is set up, simply copy and paste the one time code from the app into the one-time code field, then click on "Submit". Your setup will then be complete and you can log into ACC. For every future login, after entering your username and password on the login screen and click on "Sign in", you will have to open the authentication app on your mobile device and view the generated code. Enter that code into the "One-time code" field as shown below, then click on "Sign in". 

Email OTP

With this method, sign into your environment as usual. At the login screen, enter your username and password, then click on "Sign in". At this point, the system will ask you to enter a one-time code. Please check your email to obtain the code. A sample of the code is shown below; you can copy and paste it into your app.

Enter the code and tap "Submit". If the code timed out or is incorrect, tap on "Resend code" to obtain a new one directly in your inbox.