Configure Multi-Factor Authentication for UltraDNS Accounts

Overview

Multi-Factor Authentication, or MFA, adds an extra verification step when a user logs in to the UltraDNS Managed Services Portal.

When MFA is enabled, the user enters the UltraDNS username and password, and then provides a six digit verification code before accessing the portal.

UltraDNS supports two MFA methods:

• SMS, which sends the verification code to the mobile number saved in the user's profile.
• QR Code, which uses a mobile authenticator application to generate the verification code.

Before You Begin

• Use only one MFA method at a time. SMS MFA and QR Code MFA cannot both be enabled for the same user.
• For SMS MFA, confirm that the Mobile Number field in My Profile is accurate before enabling the feature.
• The mobile number must use E.164 international format, with no spaces or dashes.
• For example, a United States mobile number would use a format such as +11234567890.
• For QR Code MFA, install a mobile authenticator application before enabling the feature.
• SAML and MFA cannot be enabled together. MFA must be disabled at the account level and user level before SAML can be configured and used.

Enable SMS Multi-Factor Authentication

1. Log in to the UltraDNS Managed Services Portal.
2. Select My Profile in the upper right corner of the screen.
3. Confirm that the Mobile Number field contains the correct mobile number in E.164 format.
4. Select Save.
5. Select the Security Preferences tab.
6. In the Select Multi-Factor Authentication (MFA) section, select SMS from the drop down menu.
7. Check the mobile device for a text message containing the six digit verification code.
8. Enter the code in the Enter Verification Code field.
9. Select Submit.

After the code is verified, SMS MFA is enabled for future logins. UltraDNS also sends an email confirmation to the email address on file.

Log In With SMS Multi-Factor Authentication

1. Go to the UltraDNS Managed Services Portal login page.
2. Enter the UltraDNS username and password.
3. Select Login.
4. Check the mobile device for the six digit verification code.
5. Enter the code in the Verification Code field.
6. Select Login.

If more than one verification code is received, use the most recent code.

The Resend Verification Code button remains disabled until the 60 second counter has elapsed. This prevents multiple verification codes from being generated too quickly.

By default, the SMS verification code is valid for 2 minutes after it is sent. If the code expires, select Resend Verification Code and try again with the new code.

Enable QR Code Multi-Factor Authentication

QR Code MFA uses a mobile authenticator application instead of a text message. The authenticator application generates the six digit verification code used during login.

1. Log in to the UltraDNS Managed Services Portal.
2. Select My Profile in the upper right corner of the screen.
3. Select the Security Preferences tab.
4. In the Select Multi-Factor Authentication (MFA) section, select QR Code from the drop down menu.
5. Scan the QR code shown in the portal using the mobile authenticator application.
6. Enter the six digit verification code generated by the authenticator application.
7. Select Submit.

After the code is verified, QR Code MFA is enabled for future logins.

Log In With QR Code Multi-Factor Authentication

1. Go to the UltraDNS Managed Services Portal login page.
2. Enter the UltraDNS username and password.
3. Select Login.
4. Open the mobile authenticator application.
5. Enter the six digit verification code shown in the authenticator application.
6. Select Login.

Use the verification code within the time window shown by the authenticator application.

Disable Multi-Factor Authentication

1. Log in to the UltraDNS Managed Services Portal.
2. Select My Profile in the upper right corner of the screen.
3. Select the Security Preferences tab.
4. In the Select Multi-Factor Authentication (MFA) section, select None from the drop down menu.

After MFA is disabled, the user can log in with only the UltraDNS username and password unless another authentication requirement applies to the account.

Common MFA Errors

• Invalid Verification Code: Enter the current verification code. If several codes were received, use the most recent code.
• Expired Verification Code: Request or generate a new verification code and try again.
• UltraDNS Portal is currently unavailable: Try again shortly.

When to Contact Customer Support

Contact Customer Support if any of the following apply:

• The mobile number saved in My Profile is incorrect and the user cannot complete SMS MFA login.
• The user no longer has access to the mobile device or mobile number used for MFA.
• The mobile number is valid, but the SMS verification code is not received.
• MFA must be disabled before configuring SAML and the user cannot access the portal.

Important Notes

• SMS MFA requires a valid mobile number in E.164 format.
• QR Code MFA requires a mobile authenticator application.
• SAML and MFA cannot be enabled together.
• The current source documentation does not establish that the REST API supports MFA login flows.