​What is MFA?

How does MFA work?

Avoid MFA codes for 30days

Known issue

We know you value the security of your data and your customers' information, thus we have created a more secure login method to AdminWeb for Project Managers, Super Administrators and Office Administrators.
​
Multi-factor authentication (MFA) in Qondor requires all Qondor AdminWeb-users to provide multiple pieces of evidence to login. Your users will have to authenticate through something they know (their password), and something they own (their email account).
​

After a user enters their username and password, they will receive an email with a 4 character code. After entering a valid code the user will be authenticated and logged into Qondor. A user will remain authenticated in their current browser until logged out, or after 30 days of inactivity in Qondor.
​
​

​

If users log out of Qondor but have enabled a trusted device, they will not be asked for a code within 30 days.

To avoid inputting a code after logging out of Qondor, check "trust this device":

If the user does not select the "Trust this device for 30 days" checkbox, then they will be required to enter a code with their login details each time they login (at least using this particular device).
​
​If the user selects this checkbox and logs in successfully, the device will be trusted and they will not need to input a code for the next 30 days. Even if they log out or their session times out. The next time the user logs in, only the username and password will be required, as the device will remain trusted for 30 days.

​*Some users have problems with remaining authenticated. The authentication is saved in a cookie in your browser. If you are using Citrix-server or don't allow the use of cookies, you have to use MFA each time you log in to Qondor. Contact your IT department for assistance.