Multi-factor authentication (MFA/2FA)

Enabling

MFA can be enabled for all users, for types of user or for individual users. This is configured by your administrator.

Registration

If any of these settings are enabled for your user, you will get a prompt to scan a QR-code the next time you try to log into Imageshop.

It is important that you scan this code with your authenticator app. We recommend using Google Authenticator or Microsoft Authenticator, but any authenticator app which works on the same standard will work. Check with your administrator if you are in doubt.

How to scan the QR-code?

The process should be somewhat similar in all the authentication apps, but for the sake of demonstration, we will show how it is done in Google Authenticator.

First, open the app on your phone. If this is the first time you’re scanning a QR-code you should get a get-started screen:

Click on the Get started button and you’ll be prompted to setup your first account:

If you have used it before, you should click the “+”-button in the lower right corner of the screen:

Clicking on it pops up a menu where you can select “Scan a QR code”:

In either case, click on the “Scan a QR code” button to proceed.

If this is the first time or it’s been a long time since the last time you scanned a code, you might be asked to allow the app to use the camera. You need to do so in order to scan. Allow it while using the app.

Next the app starts your camera with a square box inside it, usually marked with red or yellow lines. Point the box at the QR code, and make sure the whole code is inside the box. The app will attempt to focus the camera on the code. Once it’s done, the scan should happen very fast.

When you have scanned the code, a new entry will appear in your authenticator. It will look similar to this:

Now enter the code into the authentication code field underneath the QR-code.

Make note the timer. The authenticator will generate a new code every 30 seconds. If you do not have enough time to write in the whole code in the remaining time, it is best to wait until a new code is generated and the timer resets. If you are too late in entering the code, you will get an error message and will be asked to try again.

Also note that this and only this entry is valid for login to Imageshop for that specific account/e-mail address. If you have other accounts registered in the authenticator, whether they be at Imageshop or elsewhere, they will each get their own code in the authenticator. Make sure to use the code matching the account you're trying to log in with.

Logging on

Once you have successfully registered the MFA authentication code, you are logged in. When you log in again in the future, you will be prompted to enter your authentication code again, but without the QR-code being displayed.

What if you lose your authentication code?

Should you for some reason lose your authentication code, ask your administrator to reset it for your account. After they have done so, the registration process will start over the next time you try to log on.