Genesys Cloud - Main

 View Only


Discussion Thread View
Expand all | Collapse all

New Feature and UI change coming soon: Multi-Factor Authentication

  • 1.  New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 09-29-2023 10:27
    Edited by Becky Powell 10-25-2023 18:37

    Hello Genesys Community!

    On 18 October, 2023, we will release Multi-Factor Authentication (MFA) to all customers. This feature gives admins the ability to enforce MFA for all users in their org and introduces a new "My Account" tile on the post-login splash page to enable any user to configure a device to use for secondary authentication:

    Please note that MFA is not enforced for users who utilize an Identity Provider to sign in via Single Sign-On, but the Device Management option will be available to all users so that they may opt-in to MFA if they choose to utilize Genesys Cloud native login. 
    We're delighted to introduce this critical feature to aid you in securing your Genesys Cloud org from unauthorized access and fraudulent activity. 
    Cheers!


    #PlatformAdministration
    #Roadmap/NewFeatures
    #Security
    #SystemAdministration

    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 2.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 09-29-2023 12:52

    Becky, this is very interesting.

    I have two questions:

    1. If the Admin doesn't require MFA, can the individual user still set it up if they wish? Or is it a three-option setup (Not Available / Available if Wanted / Required)?
    2. That splash screen only shows, I believe, if you initially access by going to login.mypurecloud.com etc. If you go to apps.mypurecloud.com, you get redirected upon login. So, in that instance, what will the user see if they need to set MFA?

    Thanks!



    ------------------------------
    Paul Simpson
    Eventus Solutions Group
    ------------------------------



  • 3.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 09-29-2023 15:37

    Hi Paul!

    1. Yes! MFA can be enforced for all users in an org, but any individual user can opt-in if they so choose.
    2. If an org admin has enabled the setting to require MFA for all users, and then a user logs in via apps.mypurecloud.com, then the user is redirected to a screen that requires them to set up MFA:


    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 4.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 09-29-2023 19:27

    Thanks, Becky!

    I look forward to seeing this in action.



    ------------------------------
    Paul Simpson
    Eventus Solutions Group
    ------------------------------



  • 5.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-02-2023 08:31

    If our ORG uses SSO through our AZURE integration will the end users still see the MY ACCOUNT on the post-login splash screen?  if yes can it be removed? 



    ------------------------------
    Christine Serapiglia
    ------------------------------



  • 6.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-02-2023 10:48

    Hi Christine, at this time, the My Account tile will display to all users. We may iterate on this feature in the future so that MFA device management is not presented to users who log in via SSO. 



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 7.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-03-2023 23:50
    Edited by Jeff Hoogkamer 10-03-2023 23:53

    Hi Becky,

    Is it possible to have some accounts excluded from the MFA if it's applied at an Org level, or enforce the MFA only on specific accounts 

    E.g. our limited access accounts (i.e. wallboard/dashboard) would not need MFA?

    Also can we whitelist which IP address ranges that don't require MFA prompt?


    Thanks,



    ------------------------------
    Jeff
    ------------------------------