Enable multifactor authentication

Multifactor authentication (MFA) is available to non-federated users when signing in to CONNECT. With multifactor authentication enabled, whenever you sign in to CONNECT youmust enter a one-time password (OTP) generated by an authenticator app on a device of your choice, such as your work smartphone.

Multifactor authentication greatly increases the security of your account. AVEVA recommends you enable multifactor authentication at the first opportunity.

Some accounts may enforce MFA and cannot be accessed by non-federated users without a registered MFA device. To access these accounts, ensure you register a device.

Enable multifactor authentication:

1. Install the Microsoft Authenticator or the Google Authenticator app on your chosen device.

2. Sign in to CONNECT. After you enter your username and password the Multifactor authentication registration dialog opens.

3. Select Next to proceed with multifactor authentication registration. The Device registration dialog opens.

   Alternatively, select Opt out of MFA registration if you do not want to enable MFA. This is less secure and is not recommended.Certain accounts enforce MFA for access, and your MFA status is visible to your Account Administrator.

4. From the Device registration dialog you can:

   • Use the authenticator app to scan the QR code. This is the recommended option if available.

     Note: The QR code registration option is not available when you register from a mobile device, instead use the secret key option.

   • Select Show secret key to show a sixteen-character alphanumeric code and enter it in the authenticator app. Refer to the Microsoft Authenticator or Google Authenticator app help for more information.

   Note: Select Cancel registration and sign in again to exit the registration process and access another account.

5. Follow the instructions in the authenticator app to obtain a six-digit one-time password (OTP).

6. Enter the OTP in the field at the bottom of the Device registration dialog.

7. Select Complete Registration. The Recovery code dialog opens.

   

8. Select Copy code to copy the recovery code and store it somewhere safe. You can use the code in case you have to sign in to CONNECT without having access to your chosen device. Select the I have safely recorded this code checkbox when finished.

9. Select Continue. Multifactor authentication registration is complete.

   Note: You can reset your MFA status after registering or opting out. See Update profile information for details. This is useful, for example, when you want to register with a new device.

If you are unable to sign in using multifactor authentication, try using the recovery code described in Sign in to CONNECT. If you are still unable to sign in, or if you have lost your recovery code, contact AVEVA Technical Support to reset your MFA status. This requires identity verification and administrator authorization, and may result in delays before you regain access to your account.