Reset the user account at OutSite two-factor authentication

For two-factor authentication, the user uses username/password + an authenticator app to log in. If the second step fails via the authenticator app, the user can ask you to reset their account. As a result, the login will be cancelled by the two-factor authentication and the user can log in with the username/password.

Please note:

If a user asks you to reset his account, first check the user's identity and only then carry out the steps below. Some points of attention are given below:

Only reset an account after telephone contact with a user and not on the basis of email contact. After all, the user's email can be hacked. Check whether the number to which the user calls is known in Profit (at the person linked to the user).

Ask security questions to make sure you have the user on the line. For example: what was the amount of the last invoice, who is your adviser in our organisation and when did you last contact us and what about?

The follow-up steps for the user depend on the log-in method:

• Two-factor authentication is required

  After logging in with a username/password, the user must reset two-factor authentication using the authenticator app. After that, the user can access OutSite.

• Two-factor authentication is not required (optional)

  The user can log in using a username/password. The user decides himself/herself whether he/she wants to start using two-factor authentication again.

There are two methods to reset the account, namely. through the properties of the person and through the user's properties. The first method is preferable because no rights to the authorisation tool are required.

Method 1: Reset the account via personal properties:

1. Go to: CRM / Organisation/person / Organisation/person.
2. Open the properties of each person, the Portal access tab.
3. Delete the linked account for two-factor application.

   As a result, the two-factor application linked to the user is deleted immediately.

   

Method 2: Reset the account via user properties:

1. Go to: General / Management / Authorisation tool.
2. Open the properties of the user. the OutSite tab.
3. Delete the linked account for two-factor application.

   

4. Click on: OK.

   You need to click OK to delete the two-factor application.