Celona Orchestrator now supports Multi-Factor Authentication (MFA) to enhance account security for customers. With MFA enabled users must complete a two-step verification process during login, adding an extra layer of protection beyond just a password. This ensures that only authorized users can access the system, reducing the risk of unauthorized access.
MFA is enforced at the customer level, meaning once it is enabled for a customer, all users within that customer must complete the MFA setup. This feature strengthens security while maintaining a seamless login experience.
Steps to Enable MFA
Log in as an Admin user.
Navigate to Admin -> Account Info for the specific customer.
Click the checkbox for the option Enable Multi-factor authentication (MFA).
Click the UPDATE ACCOUNT button to save the changes.
Once enabled, all non-SSO users must complete the MFA setup at their next login.
Note: MFA is only available to users not already using SSO-based authentication.
Verify Authentication
Log in to the Celona Orchestrator.
A prompt will appear requiring MFA setup.
Scan the QR code using an authenticator app (e.g., Google Authenticator, Microsoft Authenticator, Okta, or Authy).
Enter the verification code generated by the app.
Upon successful entry, the MFA setup is complete.
Log in again and enter the verification code from your authenticator app.
Important: Users have 5 minutes to enter the verification code before logging in again. Codes refresh every 30 seconds in the authenticator app.
Resetting MFA
f a user loses access to their device with MFA configured, they must contact an Admin user or Celona support to reset MFA.
Reset Steps
Log in as an Admin user.
Go to the Users section.
Locate the user needing an MFA reset.
Click Reset MFA.
The user will need to reconfigure MFA on their next login.