Multi-factor authentication (MFA) requires two forms of verification to confirm your identity. In Emburse Professional, you enter your password and a temporary security code sent by email or text message. MFA has replaced security questions for additional authentication.
When you log in from an an unrecognized device, IP address, or web browser, Emburse Professional will send a temporary security code via email or text message. You must enter the code before you can access your account.
FAQ
How Can Administrators Prepare Users for MFA?
Make sure users can receive their temporary security codes:
- Users have a current mobile number in their profile.
- Users can access the email address they use to log in.
- The email address can receive messages.
Does MFA Apply to Every Login?
No. Emburse Professional requires MFA when a login attempt does not match previous login activity. This can occur when you log in from a different web browser, IP address, or device. A web browser update, including a new version of Google Chrome or Mozilla Firefox, can also trigger MFA.
How Often Does Emburse Professional Require MFA?
The frequency of MFA is dependent on how you access Emburse Professional. Users who frequently log in to Emburse using different devices, IP addresses, or web browsers can expect more frequent MFA requests.
Can We Require MFA for Every Login?
No. Emburse Professional does not support requiring MFA for every login.
Can Our Organization Disable MFA?
MFA is enabled and required for all users by default. Administrators can disable the MFA requirement at the organization level and allow individual users to opt out.
Users who opt out of MFA will authenticate with their Emburse Professional username and password without an additional authentication method.
Can We Continue Using Security Questions?
No. MFA replaces security questions with a temporary security code as the additional authentication method.
Does MFA Affect SSO Users?
No. Users who sign in with single sign-on (SSO) continue to use their existing authentication process.
Does MFA Apply When Switching to a Delegate Account?
No. Additional authentication applies when you log in to Emburse Professional. After you log in, you do not need to authenticate again when you switch to a delegate account.