Introduction
To enhance security for Empeon Workforce Users, email-based two-factor authentication (2FA) is no longer available. SMS texting is now the sole method for completing the 2FA process. This update reduces potential security risks associated with email-based authentication, as SMS texting offers a more direct and secure way to verify identity.
Please note that this is only applicable to Empeon Workforce and not the ESS Hub.
Why Email is Less Secure for 2FA
Email accounts are frequent targets for cyberattacks, and their security often depends on the strength of their own passwords, which may be compromised. Additionally, emails may be intercepted or accessed if an attacker gains control of an email account, making them a less reliable method of ensuring identity verification. SMS texts, while not without vulnerabilities, are tied directly to a physical device, providing an additional layer of security.
Managing Users Without SMS Texting
For cases where Users do not have access to SMS texting, Administrators can still enable email-based authentication on an individual basis. To do this, navigate to the Organization Master Portal and within the Users section, select Change access rights for the particular User.
There will then be a setting for Allow Two Factor via Email that can be toggled on in order to enable email as an option for two factor authentication for this User.
Resetting Phone Numbers
With this update comes a new feature that also allows Administrators the ability to reset any previously registered phone numbers associated with Users that may be lost or outdated. If the phone number on file is no longer valid, the User can reset it through the User's settings found within the Organization Master Portal simply by clicking Reset 2FA Phone Number.
Upon initiating this, there will be a confirmation screen in order to ensure that you would like to proceed.
Upon confirming this, any previously associated phone number will be removed and during the next log in attempt made by the User, Empeon Workforce will provide instructions to register the new phone number.
These updates ensure that Users can continue to access Empeon Workforce securely, while maintaining flexibility for unique situations when it comes to two-factor authentication. For any questions regarding two-factor authentication, please reach out to Empeon Customer Support.