Logging in on OutSite using two-factor authentication

You can log in by using two-factor authentication This means that you confirm the login with your username/password via an authenticator app or via AFAS Pocket (version 1.6.78 or higher).

Would you like to change your password or have you forgotten your password? See also this description.

Preparation

• Configuration

Description

The site administrator at your organisation determines whether two-factor authentication is required or optional. For optional two-factor authentication, you can choose whether you want to use it. Two-factor authentication obviously offers better security than just a username/password.

If you use multiple OutSite sites, two-factor authentication will apply to all OutSite sites of your organisation. Therefore, activating two-factor authentication means that you must log into all OutSite sites of your organisation with two-factor authentication. With 'all OutSite sites of your organization' we mean all OutSite sites of environments covered by the same licence.

Example:

Your licence code is 12345 and there are two environments: O12345AA and O12345AB.

• The O12345AA environment has a Customer Portal requiring two-factor authentication.
• The O12345AA environment has a Training Portal that does not require two-factor authentication.
• The O12345AB environment has a Partner Portal that does not require two-factor authentication.

For logging in, this means:

• Frits logs into the Customer Portal of O12345AA and two-factor authentication is required. As a result, Frits is also required to log in using two-factor authentication on the Training Portal and the Partner Portal.
• Hester logs into the O12345AA Training Portal with her username/password. She can continue to log into the Training Portal and the Partner Portal using her username/password. After all, two-factor authentication is not required for both OutSites.

If Hester logs into the Customer Portal with two-factor authentication, two-factor authentication will also be required on the other OutSites.

Signing on using two-factor authentication

You can log in with two-factor authentication if you have set this up. Have you not done this yet? Read the following subjects about required or optional two-factor authentication.

Logging in:

1. Go to the following site.
2. Log in with your username and password.
3. If two-factor authentication applies, the following will also apply:
   • If you have linked to AFAS Pocket, you must confirm logging in with Pocket.
   • If you have linked to another authenticator app, start this app on your phone. Transfer the verification code to log into OutSite.

If two-factor authentication is not possible, you can ask the administrator in your own organisation to reset your account. You can then log in again with your username/password. Again set up two-factor authentication as soon as possible!

Please note:

AFAS Support cannot reset the two-factor authentication; this must always be done via the administrator in your own organisation.

How to set up two-factor authentication if this is required

If the administrator has made two-factor authentication required, you must link to AFAS Pocket or an authenticator app when you next login on OutSite.

Setting up two-factor authentication

1. Go to the OutSite.
2. Log in with your username and password.
3. Choose authentication via AFAS Pocket or an authenticator app.

   

   Follow the steps below.

Method 1: Log in by simply pressing one button (AFAS Pocket)

1. Click: Log in by simply pressing one button. The following screen will be displayed.

   

2. Open AFAS Pocket on your smartphone.
3. Tap the shield at the top. If this is not shown, go to Settings/Two-factor authentication.

   

4. Press + to add an account.
5. Scan the QR code on your screen with your phone.
6. Wait until your screen shows that the link is successful.

   Please note:

   Just installing the app is sufficient if you only want to use the app for logging in using two-factor authentication. The Activate all functionality option only applies if you also use the other functions of AFAS Pocket (request leave, reporting sick, etc.).

Method 2: Logging in with a verification code

You use your own authenticator app.

1. Click: Log in with a verification code.
2. Open the app on your phone (for example Duo Mobile, Google Authenticator, LastPass Authenticator or Microsoft Authenticator).
3. Next, scan the QR code on your screen.
4. The app will give you a code of six digits.
5. Enter it on your screen and click Activate.

   

If you cannot activate two-factor authentication with another authenticator app, watch this video. Are you still stuck? Unfortunately, we cannot offer support when you wish to activate an external app.

How to set up two-factor authentication if this is optional

If two-factor authentication is not enforced when logging in, you can set this up yourself.

Enabling two-factor authentication:

1. Log on to the site.
2. Click your name/Account security.

   

3. ClickTwo-factor authentication.
4. See also the steps at Setting two-factor authentication as required.

Change two-factor authentication

1. Log on to the site.
2. Click your name/Account security.

   

3. ClickTwo-factor authentication.
   • You can delete two-factor authentication (if two-factor authentication is not required for the site). Confirm the deletion using your password.

     After deleting, log in again with your username/password.

   • You can change two-factor authentication, for example if you want to link using another authenticator app.