Description:

Multi-Factor Authentication (2FA) adds an extra layer of security by requiring users to verify their identity using a second authentication factor in addition to their password. Enabling 2FA helps protect Utho accounts from unauthorized access, even if account credentials are compromised.


Rationale:

Enabling Multi-Factor Authentication (2FA) significantly reduces the risk of unauthorized access caused by compromised or weak passwords. It is a security best practice and helps organizations meet compliance requirements such as SOC 2, ISO/IEC 27001, PCI DSS, and other industry security standards.


Impact:

  • Users must complete an additional authentication step during sign-in.

  • Users must have access to the registered authentication method (email or mobile device).

  • If the configured authentication method is unavailable, users may be unable to access their account until access is restored.


Default Value:

By default, Multi-Factor Authentication (2FA) is disabled for Utho accounts and must be enabled manually.


Pre-requisites:

  • A Utho account.

  • Permission to modify account security settings.

  • Access to the registered email address or mobile device used for Two-Factor Authentication (2FA).


Remediation

Test Plan:

Using the Utho Console

  1. Sign in to the Utho Console using an account with appropriate permissions.

  2. Click the Profile icon and select My Profile.

  3. Navigate to the Two-Factor Authentication section.

  4. Verify that Two-Factor Authentication (2FA) is enabled.

  1. If Two-Factor Authentication (2FA) is not enabled, follow the Implementation Steps to remediate the issue.


Implementation Steps:

Using the Utho Console

  1. Sign in to the Utho Console.

  2. Click the Profile icon and select My Profile.

             

  1. Navigate to the Two-Factor Authentication section.

  2. Enable Two-Factor Authentication (2FA).

  3. Click Save to apply the changes.

 

  1. Sign out of the Utho Console.

  2. Sign in again using your username and password.

  3. When prompted, complete the Two-Factor Authentication (2FA) setup by following the on-screen instructions.

  4. Verify the authentication using the configured verification method.

  5. Confirm that Multi-Factor Authentication (2FA) has been successfully enabled for your account.


Backout Plan:

  1. Sign in to the Utho Console.

  2. Click the Profile icon and select My Profile.

  3. Navigate to the Two-Factor Authentication section.

  4. Disable Two-Factor Authentication (2FA).

  5. Click Save to apply the changes.

  6. Verify that Multi-Factor Authentication (2FA) has been disabled for the account.


References: