Multifactor authentication (MFA)

Welcome to our Multi-Factor Authentication (MFA) setup guide! MFA adds an extra layer of security to your account by requiring a second form of verification beyond your password. We offer two MFA options: Authentication via Email OTP and Authentication via Mobile App.

Important warning: You have 6 attempts to enter the correct MFA code during setup or login. On the 6th failed attempt, your account will be locked for 30 minutes.

Setting up MFA

Option 1: Authentication via Mobile App

1. Log in to your account using your merchant ID, username and password.

2. Select “Authentication via Mobile App” from the MFA setup page and click “Continue”

3. Add Email Address (if needed):

   • If no email is attached: Enter your email address and confirm it in the second field. Click “Continue”

   • If an email is attached: This step is skipped

     

4. Install an authenticator app (e.g., Google Authenticator) on your mobile device.

5. Add the code to your app:

   • Option A: Scan the QR code displayed on the screen.

   • Option B: Enter the code manually into your app.

     

6. Enter the 6-digit code from your app and click “Continue” (6 failed attempts will lock your account for 30 minutes.)

7. Click “Login” to complete setup.

Option 2: Authentication via Email OTP

1. Log in to your account using your merchant ID, username and password.

2. Select “Authentication via Email OTP” from the MFA setup page and click “Continue”

3. Add Email Address (if needed):

   • If no email is attached: Enter your email address and confirm it in the second field. Click “Continue.”

   • If an email is attached: This step is skipped.

     

4. Check your email and enter the 6-digit code received.

   

5. Click “Continue” to confirm. (6 failed attempts will lock your account for 30 minutes.)

6. Click “Login” to complete setup.

Logging In with MFA

Using Authentication via Mobile App

1. Log in to your account using your merchant ID, username and password.

   

2. Enter the 6-digit code from your authenticator app and click “Submit.” (6 failed attempts will lock your account for 30 minutes.)

Using Authentication via Email OTP

1. Enter your merchant ID, username and password on the login page, then click “Log In.”

   

2. Check your email and enter the 6-digit code received.

3. Click “Login” to access your account. (6 failed attempts will lock your account for 30 minutes.)

Resetting MFA

Administrators can reset a user’s MFA settings directly from the Merchant Portal. This allows users to securely reconfigure their authentication method if they lose access to their current one.

When to use this

Use this feature if a user:

• Lost access to their phone or authenticator app

• Cannot receive email OTPs anymore

• Needs to switch to a different authentication method

• Is locked out due to MFA issues

Before you start

• You must have Administration → User Management permissions

• You must decide which authentication method the user should use after reset:

  • User selects MFA method

  • Mobile App (Authenticator)

  • Email OTP

Step-by-step guide

1. Open User Management

Go to:

• Administration

• User Management

2. Select the user

• Search and select the user

• Open their profile

3. Go to Access Data

• Navigate to: Profile → Access Data → Edit profile

Select one of the following:

• None: The user can choose the authentication method
  The user will choose their MFA method at next login

• Reset: Authentication via mobile app
  The user must set up an authenticator app

• Reset: Authentication via Email OTP
  The user will authenticate using email one-time passwords

• Save your changes

The system will:

• Reset the user’s MFA immediately

• Send an informational email to the user

• Require MFA setup at next login

What happens next

At the next login:

1. The user enters username and password

2. The user is redirected to MFA setup

3. The user must configure MFA:

• If User selects MFA method → user chooses

• If Mobile App → authenticator app required

• If Email OTP → email verification required

The user cannot skip this step.

Security notes

• Each reset triggers an email notification

• Only authorized administrators can perform this action

Important:

• Always verify the user’s identity before resetting MFA

• Avoid unnecessary resets

• Monitor unusual activity

Troubleshooting Tips

• Authenticator App Issues: Sync your device’s time settings.

• Email OTP Not Received: Check spam/junk or verify your email address.

For help, contact our support team at NEXI Helpdesk.