Two-factor authentication in Splynx

Security in Splynx has always been a number-one priority. Passwords inside Splynx database are encrypted, as well as all codes. Building upon this strong foundation, Splynx supports two-factor authentication (2FA) for administrator logins.

Benefits of Using 2FA with Splynx

What if one of your administrators has a poor password and people with malicious intentions obtain access to your Splynx system?

To prevent this, 2FA adds an extra level of protection to the administrator login. What does this mean? It means that after entering your username and password you have to enter a temporary code created by an authenticator app on your mobile phone, such as Google Authenticator, Authy, 1Password or FreeOTP+. Even if a password is compromised, the attacker still needs that code to log in.

Setting Up 2FA in Splynx

Each administrator turns on 2FA for their own account:

1. Open the menu under your name in the top right corner and click Profile. The My Profile page opens on the Profile tab.
2. In the Two-factor authentication section, click Configure.
3. Open your app on your mobile phone (here it’s a Google Authenticator) and scan the QR code.
4. Type the code from the app into Enter code and click Enable two-factor authentication. Splynx confirms with Two-factor authentication enabled.

From now on, the Splynx login asks for a one-time code from the app: type it into the 2FA code field under your password. On a computer you use regularly, turn on Trusted device to stay signed in longer there.

To turn 2FA off later, click Configure again, enter a code from the app and click Disable two-factor authentication. This isn’t possible when a Super administrator makes 2FA mandatory (see below). More in the knowledge base: Profile: two-factor authentication.

Make 2FA mandatory for all administrators

A Super administrator can require 2FA for everyone in Config → Main → Preferences → Administration & Security, in the Login security policy field. The ⓘ hint next to the field explains the options:

• Disabled: 2FA is optional, and each admin decides whether to turn it on in their profile;
• Force admins to enable two-factor authentication (2FA): admins must turn on 2FA, without the option to turn it off. An admin who hasn’t set it up yet sees the Two-factor authentication configuration window right after logging in; this window has no Close button;
• Disable login without SSO or 2FA: a username and password alone are no longer enough. Each admin signs in either with 2FA or with single sign-on (SSO): the Azure SSO add-on adds a Log in with Azure AD button to the Splynx login page, so admins sign in with their Microsoft Azure AD account. Anyone without 2FA or SSO gets Access denied. Login without SSO or 2FA is disabled.

Before you choose the last option, make sure every admin, including you, has 2FA turned on or can sign in with Azure SSO: anyone with neither gets the access-denied error above. More in the knowledge base: Preferences: Administration & Security.

Lost your authenticator app?

Another administrator can reset your 2FA: Administration → Administrators, the Edit icon next to your account, then the reset icon (⟳) next to the Enabled 2FA status, and Confirm. You can’t reset your own 2FA this way: on your own account the reset icon isn’t shown. If the Super administrator loses access to their 2FA, contact Splynx support at support@splynx.com. Forgot your password as well? See how to reset your Splynx admin password.

2FA for the customer portal

Your customers can use two-factor authentication on the customer portal too: turn on Require two-factor authentication in Config → Main → Customers. After the correct login and password, the customer gets a code by email, SMS or both, so set up email and/or SMS sending first. More in the knowledge base: Customers settings.