2FA (Two-Factor Authentication) Setup Guide

What is 2FA (Two-Factor Authentication)?

Two-factor authentication (2FA) is an identity and access management security method that requires two forms of identification to access resources and data, in this case, our back office.

2FA is an effective way to ensure an organization or individual does not fall victim to a cyber attack or hacker, and it uses access codes or token generators subject to time limitations to prevent identity theft and data loss.

What do I need to do to activate this feature?

To activate 2FA, contact our client area department by sending a ticket through Mysepteo.

How do I set up 2FA with QR from my mobile?

1. Access the back office Login screen.
2. Enter your usual username and password.
3. Follow the instructions on the screen:
   1. Download the “Google Authenticator” app to your mobile device.
   2. Open the application on your mobile device and press the “+” icon in the bottom right corner.
   3.  Select the option “Scan a QR code”
   4. Scan the QR code displayed on the screen.
   5. Enter the back office login screen, the one-time code shown in the Google Authenticator app. (this code expires in a few seconds, so the process must be done quickly).
   6. Enter the device name for which you want to access the back office or a name that helps you identify in Google Authenticator that this code is for accessing the witbooking back office.
   7. Press the “Send” button.

Step 1: Log in with your usual username and password

Step 2: Scan the QR code (Google Authenticator) and enter the one-time code on this screen:

How do I set up 2FA with QR from my computer?

To configure the extension from the browser, follow these steps:

----> 2FA from your computer (video) 

How do I set up 2FA with a unique key?

Choose this option if it's not possible to use the previous QR option.

1. Access the back office Login screen.

2. Enter your usual username and password.

3. Follow the instructions on the screen:

   1. Download the “Google Authenticator” app to your mobile device.

   2. On the back office login screen press on “Cannot scan QR code?”

   3. Open the application on your mobile device and press the “+” icon in the bottom right corner.

   4. Select the option “Enter setup key”.

   5. In the Google Authenticator app, enter the key shown in the back office login screen instructions and use the values provided to fill in the remaining fields.

   6. Once the configuration is complete in Google Authenticator, enter the back office login screen, the one-time code that was just generated in the app (this code expires in a few seconds, so the process must be done quickly).

   7. Enter the device name for which you want to access the back office or a name that helps you identify in Google Authenticator that this code is for accessing the witbooking back office.

   8. Press the “Send” button.

Step 1: Log in with your usual username and password

Step 2: Scan QR code (Google Authenticator) and enter the one-time code on this screen

You have a detailed video on how to do it here.

How do I access the back office after setting up 2FA?

1. Access the back office login screen normally.

2. Open the Google Authenticator app.

3. On the back office login screen,  enter your usual username and password.

4. Enter the one-time code generated in Google Authenticator (if multiple codes appear, remember to use the one with the name/username you indicated during setup).

Step 4: Enter the one-time code generated in Google Authenticator.

How do I access the back office from another computer with the same user? (How to share QR code)

The QR code for that user will appear, and you should save it to forward to the other computer. (Whether by capturing the image and emailing it to yourself, saving it in a shared file... the point is that it must be on the other computer so you can download it)

3. On the new terminal, open the Authenticator extension and first click on the edit (pencil) icon:

 and then on the + symbol

The options to download and import the QR code to the new computer will appear:

Once the QR code is imported, you will have the same code on both computers and can log in with the same user on both terminals.

3Factor (3FA) - Accessing the Back Office with this new security step

This new intelligent security level ensures that it is you, and not an unauthorized third party, who is attempting to access the system. Access is confirmed from your email account, adding an extra layer of protection against potential attacks.

Each time a user logs into the Back Office, a risk assessment is performed to determine if there is a high risk or not.

Within this risk assessment, we can find factors such as: a new IP address, new country, new device... These risks are analyzed to determine if there is a danger or not.

If a high risk is determined, then the following occurs:

1. The user has logged into the Back Office with their credentials.
2. They have entered the one-time code.
3. A message appears on the screen saying: “Check your email and click the link to log in!”
4. At that moment, an email is instantly sent to the user to verify the login.
5. The user will have to click on “Confirm it was me”.

IMPORTANT! If clicking on "Confirm it was me" results in an access error, copy the link and paste it into another tab. This should then work, and you will be able to access.

 

The sender of the email will be: no-reply@witbooking.com

The user will have 5 minutes to click the link to access the Back Office.

You must access from the same computer and browser with which you initiated the session.

You will not need to re-enter your credentials after clicking.

 

Below is a video with the steps to follow: 3FA Video.mp4

You can repeat these actions on as many devices as you wish to share access with.