Reset Multi-Factor Authentication (MFA) For a User in Your Company
Objective
To reset Multi-Factor Authentication (MFA) for a user in your Company Directory.
Background
When a user loses the device where their MFA authenticator app is configured, or is otherwise unable to log in to Procore using MFA after setting it up, MFA must be reset for that user. As a company administrator, you can reset MFA for users in your Directory if the MFA policy is enforced by your company. After a reset is performed, the user must re-enroll in MFA to log in to Procore.
Things to Consider
- Required User Permissions:
- 'Admin' level permissions on the Company level Directory and Admin tools.
- Additional Information:
- Important! As the person resetting MFA for a user, you are responsible for verifying that user's identity and the validity of their request.
- MFA resets can only be performed if the following conditions are met:
- The user is a member of your Company Directory.
- The MFA policy is enabled by the company in which you're attempting to reset the user.
- The user does not log in using Single Sign-On (SSO).
- The user is NOT required to authenticate using MFA for the purpose of accessing Procore Pay.
Note: Users who need to have MFA reset to access Procore Pay must contact the Payment Operations team for assistance. See How does MFA work with Procore Pay and why is it required?
Steps
- Navigate to the Company level Admin tool.
- Select Security Settings.
- Select the Multi-Factor Authentication (MFA) tab.
- Under 'Reset MFA for Users', click Reset MFA.
- Enter the user's login email address exactly as it is listed in their Directory record.
- Mark the checkbox next to 'I have verified the user's request to reset MFA'.
Important! As the person resetting MFA for a user, you are responsible for verifying that user's identity and the validity of their request. - Click Reset MFA.
MFA is now reset for that user. The user must re-enroll in MFA to log in to Procore.