Two-Factor Authentication (2FA)

To enhance account security, Qualified is now implementing two-factor authentication (2FA) for users who log in using an email and password.

What is Two-Factor Authentication?

Two-factor authentication (2FA) adds an extra layer of security to your Qualified account. When this feature is active, users signing in with an email and password must complete a second step: entering a one-time verification code sent to their registered email address.

Please note that this requirement only applies to users who authenticate using a password. If your team signs in via Single Sign-On (SSO), your login flow remains unchanged.

Enabling 2FA

Once active, the next time a user attempts to sign in with their email and password, they will be prompted to provide a one-time password (OTP).

User experience

The login process for password users follows these steps:

1. Sign in: Enter your email and password as usual.

2. Receive code: An email containing a 6-digit verification code will be sent to your inbox. This code is valid for 10 minutes.

3. Verification: Enter the 6-digit code on the OTP step of the sign-in flow.

4. Access: Upon successful verification, you will be signed into the Qualified platform.

If you do not receive the code or if it expires, you can request a new one by selecting the resend option. Please be aware that verification and resend attempts are rate-limited to ensure platform security.

Managing active sessions

Enabling 2FA will not automatically log out users who are currently signed in. Existing sessions will remain active until the user logs out or attempts to sign in from a new browser or device.

Sign-in frequency

For maximum security, an OTP is required for every sign-in attempt. At this time, Qualified does not offer a "trust this device" or a 30-day exemption period.

If you have questions regarding your login configurations or security settings, please reach out to your Qualified Success Architect (QSA) for more information.