How to enable two-factor authentication at the IPI Enterprise Server?
IPI Enterprise Server – Enabling 2FA
Last updated
IPI Enterprise Server – Enabling 2FA
Last updated
Note: this section explains how to enable two-factor OTP authentication only for entering the IES web interface. To log in from OTP to other sites, you must use the appropriate settings on these sites.
In the upper right corner of the window, click the profile icon and select the Profile from the drop-down list.
Go to the One-Time Password and click on the Add OTP app button.
Follow the instructions.
You can use IPI Authenticator as an application for OTP generation.
After successfully enabling two-factor authentication, you will be prompted to save your recovery codes. 10 codes, each of which consists of 8 characters. You can log in with their help if for some reason you cannot enter the OTP code.
Log in with the recovery code.
Two-factor authentication is configured. Now you can use it with the authenticator app.
If you want to use IPI Key to generate OTP, then creating your administrator account enter your secret key in the corresponding field.
The Secret Key is the 32 alphabetic value from Step 3.
Learn more about creating accounts via IPI Client. Learn more about creating accounts on IES. How to enter credentials with the IPI key.
To disable two-factor authentication on the IES server, go to the Profile tab, One-Time Password section and click Disable 2FA.
Confirm the action.
Two-factor authentication is disabled. But you can always resume it.
After you disable 2FA on IES and enable it again, your recovery codes will be reset.
Please, note, if you just reset the OTP application, recovery codes will be not reset.
If for some reason you cannot enter the OTP code at the authorization phase, then use the previously generated recovery codes.
Enter your login and password for your account.
Click on the One-Time Password button.
Click Log in with a recovery code.
Enter one of the previously saved recovery codes and click Login.