{"id":48776,"date":"2022-11-13T05:48:02","date_gmt":"2022-11-13T05:48:02","guid":{"rendered":"https:\/\/developer.kore.ai\/v10-1\/?p=48776"},"modified":"2023-03-23T07:18:31","modified_gmt":"2023-03-23T07:18:31","slug":"two-factor-authentication-for-platform-access","status":"publish","type":"post","link":"https:\/\/developer.kore.ai\/v10-1\/chatbot-overview-ja\/two-factor-authentication-for-platform-access\/","title":{"rendered":"Two-Factor Authentication for Platform Access"},"content":{"rendered":"
<\/div>\r\n\t
\r\n\t\t
\r\n\t\t\t

The Kore.ai Platform provides an additional layer of security for enterprise user accounts with Two-Factor Authentication (2FA)<\/b> using a One-time password (OTP)<\/b> or verification code via email. OTPs are a popular choice for organizations to step up their user authentication process. These randomly generated passwords are valid only for a single login session and minimize the vulnerabilities of traditional passwords.<\/p>\n

In addition to the username, password, and Enterprise SSO for first-factor authentication, enterprise administrators can now enable 2FA on the Admin Console<\/b> for user accounts. When 2FA is enabled, the platform prompts the user to complete email verification via OTP to authenticate them.<\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

<\/div>\r\n\t
\r\n\t\t
\r\n\t\t\t

Enable Two-Factor Authentication<\/span><\/h2>\n

Only the admin user can enable 2FA for enterprise user accounts via the Admin Console. To enable 2FA, follow the steps below:<\/p>\n

    \n
  1. Log in to the Bot Admin Console<\/b>.<\/li>\n
  2. On the left menu, click 2FA<\/b> under Security & Control<\/b>.<\/li>\n

    \"\"<\/a><\/p>\n

  3. Click Enable 2FA<\/b> to activate 2FA via email OTP verification.<\/li>\n

    \"\"<\/a><\/p>\n

  4. Click Save<\/b>.<\/li>\n

    \"\"<\/a><\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

    Important<\/b>: SSO authentication<\/b> and 2FA<\/b> are mutually exclusive on the Kore.ai XO Platform. When Enterprise SSO<\/b> is enabled, 2FA<\/b> is automatically disabled for that account, and vice-versa.<\/p><\/div><\/div>\r\n\t

    \r\n\t\t
    \r\n\t\t\t

    Important Information on the Email OTP<\/b><\/p>\n

    You can use the OTP verification code only once. Reusing an OTP, entering the wrong OTP, or entering the OTP beyond the expiry time makes the OTP invalid and results in failed authentication or login error. The default validity of the email OTP is 10 minutes, and the users are expected to verify within that time.<\/i><\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

    <\/div>\r\n\t
    \r\n\t\t
    \r\n\t\t\t

    Permission Settings to Enable 2FA<\/span><\/h2>\n

    For a system admin to enable 2FA on the admin console, the master administrator should grant the role permission to the user on their admin console with the steps below:<\/p>\n

      \n
    1. On the Admin Console<\/b>, click User Management<\/b> > Role Management<\/b> on the left menu.<\/li>\n

      \"\"<\/a><\/p>\n

    2. Click the edit<\/b> icon of the desired Admin user\u2019s entry to view the Manage Role<\/b> window.<\/li>\n

      \"\"<\/a><\/p>\n

    3. Click the Permissions<\/b> tab.<\/li>\n
    4. Select \u201cYES<\/b>\u201d for Two-Factor Authentication<\/b>.\n
    5. Click Save<\/b>.<\/li>\n

      \"\"<\/a><\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

      <\/div>\r\n\t
      \r\n\t\t
      \r\n\t\t\t

      Two-Factor Authentication for Admin Users<\/span><\/h2>\n

      To log in using 2FA on the Bot Admin Console<\/b> as an admin, follow the steps below:<\/p>\n

        \n
      1. Log in by entering your email ID<\/b> and clicking Continue<\/b>.<\/li>\n

        \"\"<\/a><\/p>\n

      2. Enter your account password, and click Log in<\/b>.<\/li>\n

        \"\"<\/a><\/p>\n

      3. Enter the OTP received on your registered email address in the following screen.<\/li>\n

        \"\"<\/a><\/p>\n

        Once you enter the correct OTP and the verification is successful, the following verification success message appears.<\/p>\n

        \"\"<\/a><\/p>\n

        The system redirects to the user dashboard after an OTP successful verification.<\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

        <\/div>\r\n\t
        \r\n\t\t
        \r\n\t\t\t

        Two-Factor Authentication for End Users<\/span><\/h2>\n

        To log in using 2FA on the Bot Builder Platform<\/b> as an end-user, follow the steps below:<\/p>\n

          \n
        1. Log in to the Bot Builder by entering your email ID. Then, click Continue<\/b>.<\/li>\n

          \"\"<\/a><\/p>\n

        2. Enter your account password, and click Login<\/b> to authenticate.<\/li>\n

          \"\"<\/a><\/p>\n

        3. Select the required Virtual Assistant account.<\/li>\n<\/ol>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n
          <\/div>

          Note<\/b>: The system does not prompt for the 2FA if you have already completed 2FA for a different account in the same session. If this is your first login session, the system prompts for 2FA.<\/p><\/div><\/div>\r\n\t

          \r\n\t\t
          \r\n\t\t\t
            \n
          1. Enter the OTP verification code received via email from Kore.ai when prompted.<\/li>\n

            \"\"<\/a><\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

            Note<\/b>: Click the button Resend Code<\/b> to regenerate the email OTP verification code if you haven\u2019t received it.<\/p><\/div><\/div>\r\n\t

            \r\n\t\t
            \r\n\t\t\t
              \n
            1. Once the OTP is successfully verified, a success message appears, and the system redirects to your dashboard.\"\"<\/a><\/li>\n<\/ol>\n

              Switching the User Account after Initiating 2FA<\/span><\/h3>\n

              The Platform introduces the Switch to Different Account<\/i><\/b> option on the account verification screen to allow the user to switch to another account (from the default account) during the same session even after initiating 2FA, without entering the verification code<\/b>.<\/p>\n

              \"\"<\/a><\/p>\n\r\n\t\t<\/div>\r\n\t<\/div>\r\n

              Note<\/b>: The Switch to Different Account<\/i><\/b> option is available only for users with multiple accounts on the Platform.<\/p><\/div><\/div>\r\n\t

              \r\n\t\t
              \r\n\t\t\t

              When you click this option, the system redirects to the account selection page where you can select the same\/different account from the list to login.<\/p>\n

              \"\"<\/a><\/p>\n

              Important Considerations<\/b><\/p>\n