Multi-Factor Authentication (MFA) in SchemeServe is an enhanced, optional security measure that verifies a user’s identity using multiple factors during login.
Each piece of evidence provided is known as a factor. The more factors used, the higher the level of security.
SchemeServe authentication relied on:
- Username
- Password
- IP Address
MFA introduces an additional factor, significantly strengthening access control.
How MFA Works
When MFA is enabled:
- User enters username and password
- Credentials are validated
-
A one-time access code is sent via:
SMS, or
Email - User enters the code
- Access is granted if the code is valid
Key Detail
Access codes are valid for 5 minutes
MFA at Site Level
MFA in SchemeServe is controlled at a site level by the SchemeServe Support Team.
Configuration Options
- OFF (default)
- ON (mandatory for users at or above a defined access level)
When enabled, MFA can be enforced based on user roles or access groups.
Enabling MFA
To enable MFA at site level, contact the SchemeServe Support Team, who will configure this for you.
MFA at User Level
Users can also enable MFA individually (if not enforced at site level).
How Users Enable MFA
- Go to My Profile
- Enable Two Factor Authentication
- Select preferred method:
- SMS → requires a valid mobile number
- Email → requires a valid email address
On next login, the user will be prompted to complete MFA. You can also do this when setting up a new user.
Authentication Methods
| Method | Requirement |
|---|---|
| SMS | Mobile number stored in user profile |
| Email address stored in user profile |
Troubleshooting
Not Receiving Codes
- Possible Cause 1: Incorrect Contact Details
Check the user’s email address or mobile number in the Users section
- Possible Cause 2: Delay in Code Delivery
Wait a few minutes
Use Resend Code if needed
Code Not Accepted
- Ensure the code is entered correctly
- Avoid requesting multiple codes (this can invalidate earlier ones)
- If more than 5 minutes have passed, request a new code
User Cannot Access MFA Method
If a user no longer has access to their selected method:
Contact a Site Administrator to:
- Update the user’s MFA method, or
- Disable MFA temporarily so the user can regain access and reconfigure
.png)
