Back	Home > Tamarac Reporting > User Security and System Settings > Manage Dual Factor Authentication for Your Clients

Manage Dual Factor Authentication for Your Clients

Contents

Introduction

You can set dual factor authentication for each of your clients individually, requiring them to enter a code sent to their mobile phone if they sign in from an unrecognized device. You can also require a security question upon login. You can set this option for clients in bulk.

Once enabled, clients will be required to select three challenge questions and provide the answers the first time they sign in, or enter a code sent to their mobile device, if your firm has SMS authentication enabled. After the first successful login, clients will be able to set their computers as a trusted devices so that they don't have to answer the questions or enter a code each time they log in on that device.

This page provides the steps for how to manage dual factor authentication features for your clients.

For more information about dual factor authentication in Tamarac, see Require Challenge Questions or Mobile Phone Codes to Sign In (Dual Factor Authentication).

Enable Dual Factor Authentication for Your Clients

To enable dual factor authentication for your clients, follow these steps:

1. On the Accounts menu, click Clients/Client Portals.

2. Click the name of the client you want to enable dual factor authentication for.

3. On the Client Portal panel, under Require Dual Factor Authentication (DFA), choose Yes.

   

   If you don't see this option, you will need to enable dual factor authentication on the System Settings page in order to set it for your clients.

4. Click Save.

Clear Security Answers or Codes for a Client

To clear a client's security answers, follow these steps:

1. On the Accounts menu, click Clients/Client Portals.

2. Click the name of the desired client.

3. On the Client Portal panel, under Require Dual Factor Authentication (DFA), select Reset DFA Settings. You must have dual factor authentication enabled to see this option.

   

4. Click Save.

Manage Mobile Phone Codes

If your firm has implemented dual factor authentication, users in your firm and your clients can opt to receive a security code on their mobile phones to enter upon login. For information about mobile login options, see Mobile App Login Options.

To use mobile phone codes instead of challenge questions, users can select the Use as my default authentication method check box on the Mobile Phone tab of the My Profile page. This is also where they can enter or update the phone number for receiving the codes.

If you would like to take advantage of this feature, please contact Tamarac Account Management at TamaracAM@envestnet.com.

Enable Mobile Phone Codes

To set or change the mobile phone number where you receive security codes:

1. In the profile menu, click My Profile.

   

2. Click Edit in the Dual Factor Authentication (DFA) section.

   

3. Click the Mobile Phone tab.

   

4. If this is the first time you've used this feature, select I acknowledge that I have read, reviewed and agree to the Short Code Terms of Service.

5. Select Use as my default authentication method if you want to always use the mobile phone option instead of the security questions.

   

6. In the New Mobile Phone Number box, enter your mobile phone number.

   

7. Click Request Code.

8. When you receive the code, enter it in the Code box.

   

9. Click Save DFA Settings.