Multi-Factor Authentication (MFA) through Email

Multi-Factor Authentication (MFA) adds an extra layer of security to your Semine account. When MFA is enabled, users must verify their identity using a one-time verification code sent to their email address in addition to entering their username and password.

Who can manage MFA?

MFA is managed at the organization level and can only be enabled or disabled by users with the administrator role.

When MFA is enabled, it applies to all users within the organization unless their group has been added to the Group Whitelist.

Enable multi-factor authentication

Administrators can enable MFA from the Authentication settings in Semine.

1. Log in to Semine as an administrator.
2. Go to Settings.
3. Select the three-dot menu for the organization and click Edit.
4. Open the Authentication tab.
5. Locate the Multi-Factor Authentication (MFA) checkbox and enable it.
6. Click Save or Save and Close.

After MFA is enabled, all users will be required to complete email verification during login unless they belong only to a whitelisted group.

Whitelist a group

After enabling Multi-Factor Authentication (MFA), the Group Whitelist section appears below the MFA setting. You can exempt specific groups from MFA by enabling the Disable MFA option for those groups.

1. In the Group Whitelist section, locate the group you want to exempt. The table displays the Group, Clients, and Disable MFA columns.
2. Select the Disable MFA checkbox for each group you want to exempt from MFA.
3. Click Save or Save and Close.

Users who belong only to whitelisted groups can log in without completing the MFA verification step, even when organization-level MFA is enabled.

How MFA login works

When MFA is enabled, the login process includes an additional verification step.

1. Enter your username and password as usual.
   
2. A one-time verification code is sent to your registered email address.
3. Enter the verification code you received in the email and click Verify to continue. If you did not receive the code, click Resend code to send a new one.
   
4. If you have access to multiple organizations, you may be directed to the organization selection page after successful verification.