Multifactor Authentication (MFA)

Modified on Thu, 14 May at 9:28 AM

The multi-factor authentication portal improves your security by requiring an additional step when logging into your ProCirrus services. In addition to the added security, the system allows you to manage password recovery and resets.

ProCirrus offers 5 methods in addition to your normal password, and we recommend firms enable at least 2. Your options may vary based on your firm's policies.


MFA Methods

1. Authenticator App

We highly recommend this as your primary authentication method, as it is not subject to voice carrier outages that affect SMS text messages. This method uses an app installed on the employee's smartphone (Google Authenticator or Microsoft Authenticator). When the user logs in to the ProZone, a code is generated within the app and entered into the logon screen. This method is extremely reliable (it works both online and offline) and very intuitive.

Install Microsoft Authenticator:

Install Google Authenticator:

Enrolling the Authenticator app for ProZone: See the attached Mobile Authenticator Enrollment.pdf.


2. SMS (Text Messages)

Just like it sounds, the system sends you a text message with the code. This method, while popular, can be subject to voice carrier outages that affect your ability to authenticate.


3. External Email

When enrolled, you can use this alternative method to send a code to a secondary, non-ProCirrus-hosted email account. You select the option, grab the code from your secondary email, and log in without your cell phone. However, not all personal email addresses have MFA enabled, so this method, while convenient, is not the preferred backup.


4. HOTP Card

A credit-card-sized device that fits in your wallet. It has a button and a screen; when the button is pressed, a One-Time Password (OTP) is displayed. Each user needs their own card. The cost is $25 per card, and the battery lasts 3-7 years depending on frequency of use.

This is the preferred backup method (for times when someone leaves their phone at home), as it is more secure than sending the code to a personal email address that may not have MFA enabled. An admin can keep a couple of cards on hand. If someone leaves their phone at home, the admin can contact ProCirrus Support and have us temporarily assign a card to that user for the day.


5. Bio-Key

A USB dongle/cable with a thumbprint reader. Plug it into your workstation, install the necessary software, and use your thumbprint to log in. This option is $1 per user per month, plus the price of the Bio-Key thumbprint unit.


Note: For additional MFA enrollment instructions, see the attached How it works.pdf.

Tip: Need help choosing or setting up your MFA methods? Contact ProCirrus Support and we'll walk you through it.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article