Two Factor Authentication

Your processes in Aero are likely to contain data that is worth protecting. While user passwords are securely stored, an additional layer of security is wisely added. By enforcing two factor authentication (2FA) you can require your users to provide additional 'proof' they actually have access to the environment they're logging into. In this article, we will explain how to enforce 2FA for your environment. Moreover, we will provide an explanation on how users should register in able to log in using 2FA. Note that alternatively, you could connect your Microsoft Entra tenant to securely handle the authentication process.

Enforce 2FA for users in your environment

Aero allows you to require either all users to log in using 2FA, or a selection of users. In the latter case 2FA will be configured to only apply to certain user groups. This can be configured in the setup section under Environment.

1. To enforce 2FA login for your environment: Navigate to the Environment settings within the setup section. Enable 2FA: Check the Require 2FA checkbox.
2. If you only want certain user groups to log in using 2FA, select those groups under Require 2FA for groups.

Register for 2FA

If users are required to log in using two factor authentication, they will have to enter a temporary code as a second step of verification in the login process. The first time a user logs in after this requirement is set, they will have to register their account using an authenticator app. For instance, Google Authenticator. But other apps should also work. Additionally, users can also choose to install a browser extension and use that for their 2FA.

Upon initial registration (and after a reset), users will be asked to scan a QR code in order to configure their 2FA account.

In order to add BizzStream Aero in your authenticator app follow these steps:

1. Open your chosen authenticator app.
2. Tap the Plus icon.
3. Scan the QR code.
4. The account will be added to your authenticator app.
5. To change the name, long press the account.

After successfully adding the account, enter the generated code from your authenticator app into the BizzStream Aero login screen to proceed.

Log in with 2FA

Once a user added BizzStream Aero to their authenticator app, they can log in using the codes in the app. Each time a user will log in, the 2FA screen will appear after entering their password.

To proceed with the login process, enter the code from the authenticator app.