Set up Multi-Factor Authentication (MFA) as a Procore User (Closed Beta)
Objective
To set up a Multi-Factor Authentication (MFA) app for Procore on your mobile device.
Background
If a company you access in Procore enables MFA, you must complete a multi-factor account login process to authenticate your identity.
These factors include:
- The email address and password for your Procore user account. If you are an authorized Procore user, you will be prompted to enter your user name and password on the Procore login page.
- A one-time password code generated by an MFA app on a mobile device. Next, a Time-Based One-Time Password (TOTP) code is sent to your mobile device. A TOTP code is a randomly generated secret code displayed on a user's mobile device using a TOTP-compliant app.
Things to Consider
- Additional Information:
- The TOTP-generated secret code is valid for thirty (30) seconds.
- Users are prompted to enter the TOTP-generated password before:
- Logging into Procore with a Procore user account that is a member of a company's Directory where MFA is enforced.
Steps
- Install an Authenticator App on Your Mobile Device
- Log in to the Procore Web Application
- Configure MFA
Step 1. Install an Authenticator App on Your Mobile Device
Before you begin the login steps, install an authenticator app on your mobile device. Procore's MFA solution is compatible with all TOTP-compliant Authenticator apps, such as Auth0 Guardian and Google Authenticator.
Important
If your device is managed by your company, you might need permission to download the TOTP-compliant password application on your Android or iOS mobile device.
Step 2. Log in to the Procore Web Application
- Go to the Procore web application at: https://login.procore.com.
- Enter your Procore email address and password.
- Click Log In. You will be directed to the MFA login page next.
did you know? You can set up MFA early.
When a company decides to enforce Multi-Factor Authentication (MFA), they choose a date for the setting to begin impacting users. You should be notified that your company is choosing to enforce MFA before the date arrives. To get set up before the enforcement date:
- Click your avatar in the menu bar to navigate to My Profile Settings.
- Click the Security Settings tab.
Note: If you don't see the Security Settings tab, your company has not yet set an enforcement date for MFA. You cannot set up MFA for your account until an enforcement date is configured and the 'Require MFA' switch is toggled to the 'On' position for your company. See Enable Multi-Factor Authentication (MFA) for your Company's Procore Account. - Click Enroll in MFA.
- Continue to Step 3. Configure MFA below.
Step 3. Configure MFA
- On the Enter Your Password page, enter your Procore Email Address and Password again.
- After entering your login credentials, the Secure your Account page appears.
Important
You must download and install an authenticator app to scan the QR code. Contact your company's IT department for guidance on the app to use in your environment.
The example steps below show you how to download and install the free Google Authenticator app. Your company may require you to use a different authenticator app. To confirm the app to use in your environment, contact your company's IT department.
- With your mobile device, open your authenticator app and scan the QR code displayed on your computer's screen.
Tip
Why isn't my phone's camera scanning the QR code? To use the Scan a QR Code function, you must scan the QR code with the Authenticator app. If you are trying to scan the code using your phone's built-in camera software, it will NOT work. Instead, open the Authenticator app and then use the app's built-in scanning function.
Setting up MFA from your mobile device without a computer? Instead of scanning the QR code, tap 'Trouble Scanning', then enter your code manually in the authenticator app you're configuring.
- Enter the 6 digit code that appears in your authenticator app.
- At the Almost There page, click Copy Code and mark the I have safely recorded this code check box.
Warning
Be sure to save your recovery code in a location that is securely accessible from another device. If your MFA device is lost or damaged, you will need your recovery code to set up MFA on a new device. Each recovery code can be used only once. After a recovery code is used, you will have the option to save a new recovery code.
5. Click Continue.
Your device is now configured for login with MFA.