Page tree
Skip to end of metadata
Go to start of metadata

Multi-factor authentication (MFA) offers an additional level of security for your AroFlo site. It requires users to enter a code obtained from an authenticator app (typically on their phone or tablet) before they can log in.

Who needs to use MFA?

MFA is optional for all users. In the future it will be compulsory for users with access to Xero via the AroFlo Integration menu.


Enable MFA

Permission Groups

  • Managers and those with permission  can enable MFA on their own user card.

  • Site Administrators (that can view and edit other users) with the above permission can also enable or disable MFA for other users.

MFA is enabled on a user card.

  1. In the Office interface, go to Site Administration > Users > Select User. Alternatively go to Manage > Users > Select User.
  2. Under Multi-factor Authentication, click Enable.

    If you're viewing your own user card, click Enable & Configure. You can also configure MFA as soon as it has been enabled.

  3. The Enable MFA Verification window  will appear. Click Enable.

The user is now ready to configure MFA. If you have enabled MFA for another user, they will see the configuration window on next login. Refer to the steps below.

Configure MFA

Once a user has MFA enabled, that user will see the Configure MFA Verification window the next time they log in.

If you're enabling MFA for yourself, you will see this as soon as you enable MFA.

  1. If you don't already have an authenticator app on your device, download one.

    Authenticator app options include Google Authenticator, Microsoft Authenticator or Twilio Authy.

  2. When you see the Configure MFA Verification window in AroFlo, Open your authenticator app.

  3. Add an account in the app. Scan the QR code shown to you in the Configure MFA Verification window.

  4. The authenticator app will then display a six-digit verification / password code.
  5. Enter the six-digit code into the Verification Code field.
  6. Click Verify & Continue. You will be logged in.

    Optional: Tick Don't ask again for 30 days if you want the benefit of MFA without having to enter a code on each login.


Manage MFA

Once a user has MFA enabled and configured, it can be managed from their user card.

  1. In the Office interface, go to Site Administration > Users > Select User. Alternatively go to Manage > Users > Select User.
  2. Under Multi-factor Authentication, click Manage. You will see the Manage MFA Verification window.

Disable MFA

  1. From the Manage MFA Verification window, click Disable.
  2. A window to confirm will appear. Click Disable.

Reset MFA

Reset MFA allows a user to configure MFA again.

Use this when a user loses access to a device that has the Authenticator App.

  1. From the Manage MFA Verification window, click Reset.
  2. Refer to 'Configure MFA' instructions above.


Using MFA

Once a user has enabled and configured MFA, the verification prompt will appear on Office login and Field login.

  1. Open the authentication app on your device.
  2. Locate the code displayed with your AroFlo account.
  3. Enter the code into the 'Verify Your Account' window.
  4. Click Verify.

    Don't ask again for 30 days

    A user can click the 30 day checkbox to gain the benefit of MFA without having to enter the verification code at every login.

    This can happen for a few reasons. Including that time isn’t correctly synced on your Authenticator app. Look for settings such as 'Time correction' or 'Sync' in your chosen app.

    Google Authenticator Help

    Microsoft Authenticator Help

    Twilio Authy Help

On this page

Authentication Apps

Google Authenticator

Microsoft Authenticator

Twilio Authy

Feature access

Parts of this feature are included in AroFlo Go.

Related articles

Contact our support team.