Increase security by adding an authenticator app so employees can use Google Authenticator when signing into Avanti. This multi-factor authentication (MFA) works with your employees’ current authentication to help ensure employees are who they say. We support Google Authenticator for an authenticator app.
Important Information
This only applies if you’ve moved to the latest ASSP.
Before setting up the authenticator, you’ll need to make a couple of decisions.
Decide when employees need to use Google Authenticator to confirm their identity. You can have them use it when:
Signing into the Avanti Desktop, ASSP, and Avanti Go.
Changing their security options in ASSP.
Changing their password on ASSP.
Decide how often users must use Google Authenticator when signing in on their last device and different devices.
Additional Information
Employees will need a smartphone to use Google Authenticator to sign into Avanti while on the go. There are other MFA options if some of your workforce doesn’t have one and needs to sign in on the go. Check out the Multi-Factor Authentication Overview for more information.
Let’s get started.
Step 1: Open Avanti Self-Service Portal Security Settings in the Avanti Desktop and select the Multi-Factor Settings tab.
By default, this can be found in Web Services >> Installation and Maintenance.
Step 2: Select Enable Multi-Factor Authentication.
Step 3: Select Require Authenticator for Multi-Factor Setup Option.
Step 4: Choose when you’d like employees to use Google Authenticator to confirm their identity.
Multi-Factor Required to Login: Select for employees to use MFA when signing into ASSP, the Avanti Desktop, and Avanti Go.
Multi-Factor Required to Change Security Options: Select for employees to use MFA before changing their ASSP settings.
Multi-Factor Required to Reset Password: Select for employees to use MFA before changing their password on ASSP.
Additional Information
We recommend using MFA in all three of these scenarios.
Step 5: In Authenticator Threshold, enter the allowed time difference between the employee’s device and the actual time in minutes.
Additional Information
While most people opt to use the carrier time on their phone, the threshold provides a buffer in case their phone is a few minutes off. We recommend setting the Authenticator Threshold to 5. The larger this threshold is, the less secure it is.
There’s no need to worry about your employee’s time zones; we adjust for that.
Step 6: On the Multi-Factor Persistence tab, select Enable Multi-Factor Authentication Persistence if you don’t want your employees to use the app every time.
Additional Information
We recognize employees using the same browser on the same computer who haven’t cleared their cookies.
Step 7: In Days Before Multi-Factor Required, enter the number of days before employees need to use the app again when signing into ASSP.
Additional Information
We’ll recognize employees across all their devices once they first sign in using Google Authenticator on each device.
For example, if this is seven days and a new employee signs into ASSP with the app on their laptop Thursday and on their phone Monday, they won’t need the app again on either device until the following Monday.
Step 8: In Days Before Persistence Expires, enter the number of days before employees need to use MFA to sign into ASSP after they last used it on that device.
Step 9: Select OK to save your changes.
Congratulations! Next time your employees sign in, we’ll guide them through setting up an app.
Are you using Microsoft Single Sign-On with Azure’s MFA to authenticate some of your employees? Prevent these employees from having to enter their MFA info twice by disabling Avanti’s MFA for them. Go to Disable Avanti MFA When Using Microsoft Sign-On for more information.