Multi-Factor Authentication

Secure user access to BigFix SaaS with MFA using authenticator apps.

Overview

MFA adds a second layer of protection during login by requiring both a password and a time-based code from an authenticator app, improving account security. Multi-Factor Authentication (MFA) enhances the security of your BigFix SaaS environment by requiring users to verify their identity with a second factor beyond the password. MFA is especially recommended for business partners managing multiple tenants, each with critical enterprise data, to protect against unauthorized access.

Note: With this release, Time-Based One-Time Password (TOTP) authenticator apps—such as Google Authenticator or Microsoft Authenticator—are supported.
Key Benefits

  • Adds an extra layer of security beyond passwords

  • Reduces risk of compromised credentials

  • Aligns with industry standards (e.g., Microsoft O365)

  • Empowers administrators to enforce security policies across all tenant users

Enforcing MFA for All Users

The SaaS Admin creates a new user through the User Manager app.

SaaS Admins can enforce Multi-Factor Authentication (MFA) for all users within a customer account by enabling the Require multi-factor authentication (MFA) for all users toggle in the User Manager app.
MFA setting
Once this option is activated, all users will be prompted to configure MFA the next time they log in. To disable enforcement, the admin can simply turn off the toggle at any time.

MFA Recovery (Lost Authenticator App)

  • If a user loses access to their authenticator app:

    1. They must contact their SaaS Admin to reset MFA.

    2. The admin resets MFA for the user in User Manager.

    3. On next login, the user must reconfigure MFA.

  • If the only SaaS Admin loses MFA access:

    • Open a support ticket with the vendor to reset MFA via the backend (e.g., Cognito).

    • Admin will be prompted to reconfigure MFA on next login.