Genesys Cloud - Main

 View Only


Discussion Thread View
Expand all | Collapse all

New Feature and UI change coming soon: Multi-Factor Authentication

  • 1.  New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 09-29-2023 10:27
    Edited by Becky Powell 10-25-2023 18:37

    Hello Genesys Community!

    On 18 October, 2023, we will release Multi-Factor Authentication (MFA) to all customers. This feature gives admins the ability to enforce MFA for all users in their org and introduces a new "My Account" tile on the post-login splash page to enable any user to configure a device to use for secondary authentication:

    Please note that MFA is not enforced for users who utilize an Identity Provider to sign in via Single Sign-On, but the Device Management option will be available to all users so that they may opt-in to MFA if they choose to utilize Genesys Cloud native login. 
    We're delighted to introduce this critical feature to aid you in securing your Genesys Cloud org from unauthorized access and fraudulent activity. 
    Cheers!


    #PlatformAdministration
    #Roadmap/NewFeatures
    #Security
    #SystemAdministration

    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 2.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 09-29-2023 12:52

    Becky, this is very interesting.

    I have two questions:

    1. If the Admin doesn't require MFA, can the individual user still set it up if they wish? Or is it a three-option setup (Not Available / Available if Wanted / Required)?
    2. That splash screen only shows, I believe, if you initially access by going to login.mypurecloud.com etc. If you go to apps.mypurecloud.com, you get redirected upon login. So, in that instance, what will the user see if they need to set MFA?

    Thanks!



    ------------------------------
    Paul Simpson
    Eventus Solutions Group
    ------------------------------



  • 3.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 09-29-2023 15:37

    Hi Paul!

    1. Yes! MFA can be enforced for all users in an org, but any individual user can opt-in if they so choose.
    2. If an org admin has enabled the setting to require MFA for all users, and then a user logs in via apps.mypurecloud.com, then the user is redirected to a screen that requires them to set up MFA:


    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 4.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 09-29-2023 19:27

    Thanks, Becky!

    I look forward to seeing this in action.



    ------------------------------
    Paul Simpson
    Eventus Solutions Group
    ------------------------------



  • 5.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-02-2023 08:31

    If our ORG uses SSO through our AZURE integration will the end users still see the MY ACCOUNT on the post-login splash screen?  if yes can it be removed? 



    ------------------------------
    Christine Serapiglia
    ------------------------------



  • 6.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-02-2023 10:48

    Hi Christine, at this time, the My Account tile will display to all users. We may iterate on this feature in the future so that MFA device management is not presented to users who log in via SSO. 



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 7.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-03-2023 23:50
    Edited by Jeff Hoogkamer 10-03-2023 23:53

    Hi Becky,

    Is it possible to have some accounts excluded from the MFA if it's applied at an Org level, or enforce the MFA only on specific accounts 

    E.g. our limited access accounts (i.e. wallboard/dashboard) would not need MFA?

    Also can we whitelist which IP address ranges that don't require MFA prompt?


    Thanks,



    ------------------------------
    Jeff
    ------------------------------



  • 8.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-10-2023 15:22

    Thanks for your question, Jeff. At this time, if MFA is enforced, it is enforced for all users/licensees. We have plans to iterate rapidly to allow customers to enforce for admin users only. We welcome any additional ideas in our ideas portal: https://genesyscloud.ideas.aha.io/



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 9.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-12-2023 08:02

    Hi Becky

    In our Beta environment, we use AzureAD SSO, but the Multi-Factor Authentication (MFA) screen is displayed.

    When GA is implemented, will the Multi-Factor Authentication (MFA) screen be changed so that it will not be displayed when logging in using SSO?



    ------------------------------
    雅士 山崎
    Itochu Techno-Solutions Corporation(CTC)
    ------------------------------



  • 10.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-16-2023 09:36

    Hi Masashi, at this time, the My Account tile will display to all users. We may iterate on this feature in the future so that MFA device management is not presented to users who log in via SSO. 



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 11.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-18-2023 17:00

    Hi Becky, this is definitely redundant for my users. Our SSO Orgs already enforce MFA. Is there no way to disable this on SSO enabled Orgs? We do not need to confuse our agents with options they will never use, IE. MFA or Architect on a splash screen.

    Note, I added an idea to help push this along. 

    Ability to disable splash screen | Genesys Cloud Ideas Portal (aha.io)



    ------------------------------
    Albert Arellano
    Qualfon Data Services Group, LLC
    ------------------------------



  • 12.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-18-2023 17:53

    If not removing it completely for SSO orgs, not sure how possible this is Becky, but for those could the device/account management link instead go to the user's MFA setup page for the SSO provider, eg https://mysignins.microsoft.com/security-info for Azure?



    ------------------------------
    Vaun McCarthy
    ------------------------------



  • 13.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-19-2023 10:35

    Hi Vaun, I'm not sure how we would support the behavior you've proposed, since many customers utilize multiple SSO providers. That said, we are definitely investigating options to not show the device management options when users log in via SSO. 



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 14.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 10-13-2023 17:25

    Multi-Factor Authentication is sended by email / SMS / Whatsapp ?

    If you use SMS for MFA, ¿you need register a new 10DLC number?



    ------------------------------
    Max Hernandez
    ------------------------------



  • 15.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-16-2023 09:37

    Hi Masashi, at this time we don't support MFA over SMS. 



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 16.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-18-2023 22:18

    Hi Becky - I understand we support Timed OTP (through a QR code) at this point, and do we have a list of Authenticator smartphone apps that we recommend to import a QR code?  Or, any major one is supposed to work (e.g., Google Authenticator, Microsoft Authenticator, Twilio Authy)?  Let us know.  Thanks!



    ------------------------------
    Hiroto Masaki
    Genesys - Employees
    ------------------------------



  • 17.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    GENESYS
    Posted 10-19-2023 10:23

    Any major authenticator application should work! Please do let me know if you observe differently. Thank you!



    ------------------------------
    Becky Powell
    Director, Product Management
    Genesys - Employees
    ------------------------------



  • 18.  RE: New Feature and UI change coming soon: Multi-Factor Authentication

    Posted 01-22-2024 10:33

    Hi Becky,

    With regard disabling the myaccount option on log in ? is this any further on?

    For me its a counter intuitive to launch single MFA without a permission that controls it. Especially when genesys is focused on larger contact centers who would most probably use an SSO provider.

    Seems like an easy fix too as its a ui option that same as apps in the ui control it by permission or group.

    Thanks

    Damien



    ------------------------------
    damien collard
    IP Integration Limited
    ------------------------------



Need Help finding something?

Check out the Genesys Knowledge Network - your all-in-one access point for Genesys resources