Disabling, enabling, or deleting MFA credentials

Users may disable or delete their MFA credentials. The distinction between disabling and deleting credentials is explained below.

If a credential is disabled, it can be re-enabled. For example, you might temporarily disable MFA and decide to enable it later.
- Note: If MFA is required, you will not be able to access functionality in the system until you re-enable at least one MFA credential.
If a credential is deleted, it is permanently deleted. The recovery code associated with the credential will remain in the database.
- Note: If MFA is required, you will not be able to access functionality in the system until you register at least one MFA credential.

Administrators can disable, enable or delete a credential on behalf of a user.

Disabling your MFA credential

To disable your MFA credential, take these steps:

Click the Settings icon in the upper right corner of the Home page. The employee profile Settings page opens.
Click the Security tab. The Security page opens.
Click Disable on the credential. The credential is disabled and the button is replaced with the Enable option.
- If MFA is optional and no credentials are enabled, the system will use the standard database authentication method the next time you log in.
- If MFA is required and no credentials are enabled, you will be required to enable at least one credential as soon as you click an option anywhere on the page.

To enable your MFA credential, take these steps:

Click the Settings icon in the upper right corner of the Home page. The employee profile Settings page opens.
Click the Security tab. The Security page opens.
Click Enable on the credential. The credential is enabled and the button is replaced with the Disable option. Depending on your agency's MFA implementation:
- You may be able to register credentials for hardware keys and authenticator apps. You can choose which credential you want to use when the log in page opens.
- The next time you log in, the system will use the MFA authentication method.
- The Continue option may appear. Click Continue. The Home page displays for the role that is required to use MFA.

To delete your MFA credential, take these steps:

Click the Settings icon in the upper right corner of the Home page. The employee profile Settings page opens.
Click the Security tab. The Security page opens.
Click the trash icon on the credential. A confirmation message displays.
Confirm or cancel the deletion.
- Click Yes to delete the credential. If MFA is optional and no credentials are enabled, the system will use the standard database authentication method the next time you log in. If MFA is required and no credentials are enabled, you will be required to enable the credentials as soon as you click anywhere in the system.
- Click No to cancel the operation.