Product Tip Tuesday: Multi-Factor Authentication

BetterCloud

March 19, 2019

2 minute read

It’s Tuesday, so you know what that means—a new product tip!

Up this week: multi-factor authentication (MFA), a feature that will help protect sensitive company information and your employees’ personal data.

MFA adds a second layer of security to online accounts that are password protected. While not everyone may be a fan, it’s a necessary layer of protection.

Your security process should ensure that everyone (or some group of people) has MFA enabled in their SaaS applications. However, in native admin consoles like the Google Admin console, it’s not easy to see this information. This can cause problems if, for example, you are audited and you need to make sure that everyone has the correct level of access and security protocols in place.

BetterCloud’s MFA alerts give IT and security teams visibility into which users have or haven’t enrolled in MFA for G Suite, Box, Slack, Okta, and Zendesk. This feature also allows IT and security teams to enforce MFA security policies.

In order to see which employees are in compliance, you can leverage the User Directory to filter and see any user’s MFA status across their connected applications.

You can also set up a workflow that alerts you when someone is not in compliance and then sends the user a notification. From here, you can then adjust their permissions/level of access in given applications to make sure they have enabled MFA before accessing sensitive data.

Additionally, you could give users limited access to data until they have enabled MFA, at which point a workflow will finish their onboarding. In order to do this, you would set up two workflows. The first workflow would put a new user in a restricted OU and then send an email to the user to enable MFA. The second workflow would kick off once the user enabled MFA; it would move the user to a non-restricted OU, add them to the appropriate groups, share necessary files, etc.