Using Multi-Factor Authentication

Multi-factor authentication is required for all users and can’t be disabled.

Users can use an authentication app or get an authentication code sent to their email address or mobile device in order to log in. However, if the user selects email, the user must ensure their email address is verified before using the email option to receive an authentication code. If the user selects mobile, they must have a phone number set up in their user account.

Choosing the Delivery Option for Multi-Factor Authentication

The default delivery method for multi-factor authentication is by authentication app. However the administrator or the user can change the delivery method to email or mobile device at any time.

Once a user has set up a multi-factor authentication app, they don’t need to set it up again unless they change their mobile device. (See Resetting Multi-Factor Authentication for Users.) For example, if the user sets up an MFA app, changes to email, then changes back to the MFA app option, that user will not have to set up their MFA app again as long as they have not deleted their MFA setup for Barracuda RMM.

To change the delivery option for multi-factor authentication

1. In Service Center, do one of the following
   • If you are a user, to change your own MFA option, click your user name on the right side of the title bar and click Edit Profile.
   • If you are an administrator, to change the MFA option for another user, click Configuration > Users & Roles > User Management. Then click the name of the user you want to edit.
2. Click the Profile tab.
3. In the Multi-Factor Authentication Option section, click one of the following check boxes:
   • Email
   • Mobile

   • Authentication App
     

     If the user’s email isn’t validated, you can’t use the email option.
4. Click Save.

Resetting Multi-Factor Authentication for Users

If a user replaces their mobile device, you need to reset the multi-factor authentication on their account. Resetting multi-factor authentication on a user's account forces them to re-configure their authentication app before they can log in to Barracuda RMM again.

You cannot reset multi-factor authentication on an account until the user has completed the initial configuration.

To reset multi-factor authentication on an account

1. In Service Center, click Configuration > Users & Roles > User Management.
2. Click the name of the user account you want to reset.
3. Click the Profile tab.
4. Click the Reset Configuration Process button.
5. Click OK.