Hey everyone. I'm Shweta from Sophos
support. Today we will be looking
at how to set up multi factor authentication
in Sophos Central. Using
multi factor authentication means that admins
must use another form of authentication
as well as their username and password.
Multi factor authentication is turned on by
default for the newly created Sophos Central
accounts.
Admins can use the sophos authenticator,
google authenticator, sms or email
authentication to sign in. We will
be following the steps outlined in the documentation
which is linked in the video description.
First we'll set up MFA For
the admins we choose then signing with
MFA For the first time, discuss
the different authentication methods and finally
show how to reset admin sign in details.
First log into your Sophos Central
dashboard with the super admin account. You
must be a super admin to configure MFA
go to Overview, global
settings and then multifactor authentication,
choose how you want admins
to sign in from the option that has no MFA
needed, All admins need MFA, this is by
default for new accounts, select admins
will need MFA, this lets you select
individual admins. If you choose select
admins will need MF. Our user list is
displayed, click add admins on
the right of the screen, move adminis to the
assigned user list and click add
click on save. When
admins next sign in, they should set
up new method of authentication. If
you need to turn off MFA at some point,
you can simply change the method to "no MFA
needed". Let's look at the signing
in for the first time with M. F. A.
At the sign in screen. You'll need to enter
user ID and password.
A set up your log in Information
dialog explains that signing in needs
additional authentication in
the next dialog, you'll need to enter the
security code that has been sent to
you in an email
and then a four digit pin.
This enables you to use email
as an authentication method.
In the next dialog, choose the authentication
type. In
verify your device, scan the
QR code and enter the security code
that Sophos or google authenticator.
displays. You also
need to enter a security code to verify
your device. If you have choosen sms
as your authentication type
In case you do
not have access to Sophos authenticator,
google authenticator or SMS. You
can sign in with the email authentication method
at the sign in screen, enter the user
I. D. That is email address and
passport
and verify your logging, click choose
another method and pick
your challenge, click the email option.
An email is sent to you. If you don't receive
it within five minutes, the security code
that it contains is no longer valid
to request another code. Either refresh
to verify your log in page or go back
to pick your challenge based and click the
email option again
and verify your log in. Enter the security
code and your four digit pin
Finally,
let's look at how to reset a user's
MFA settings, simply navigate
to that user in the people tab
Under
MFA enabled click on reset
the next time that user attempts to log
into central, they need to reconfigure
that MFA authentication.
Hope you found this video useful
Let us know by hitting the thumbs to give us feedback
on techvids or on youtube in the comments,
Check out the documentation for this video in
the video description and watch more great
videos on techvids.sophos.com
Bookmark techvids, subscribe on
Youtube and view and post questions
on our community.sophos.com
Thanks for watching. Take care!