2FA/MFA - Two Factor Authentication

2FA/MFA - Two Factor Authentication

Enabling 2FA for your account enhances security for operators accessing your data. ScoutDNS supports token-based 2FA, which can be enforced for all operators with account access. Once enabled, operators must authenticate using a token sent to the email associated with their user ID. Super Admins can toggle 2FA on or off in the Access Management screen.

The 2FA toggle switch is located in the upper-right corner of the Access Management settings and is visible only to Super Admin users.




Once enabled, any operator with account access must authenticate using a six-digit token sent to their email. Operators can elect to Trust Device to bypass token authentication for 30 days, after which they will be required to enter a new token at their next login.

Info
If an operator has access to multiple ScoutDNS accounts, the token is valid for all accounts with 2FA enabled. They will not be prompted to enter a new token as long as their current session remains active.




    • Related Articles

    • Single Sign On (SSO) Configuration - Entra ID

      Entra ID SSO Enabling Single Sign On (SSO), allows admins to manage access for their instance through Entra ID SSO. ScoutDNS uses the Open ID Connect (OIDC) protocol for secure commination with Entra ID. SSO will disable all existing ScoutDNS ...

    • Safe Search Explained

      ScoutDNS supports Safe Search settings to enhance web browsing safety on search engines. This feature helps block certain search terms entirely and removes inappropriate search results, including those from image and video tabs. Bing Safe Mode Since ...

    • Organizations - Configuration and Management of Multi-Tenant Use

      ScoutDNS provides two levels of tenancy. The primary inherent level allows any operator to be a member of any number of accounts and have different roles depending on each account's settings. The second level, enabled through the Organizations tab, ...

    • Working with Whitelist and Blacklist

      At times, it may be helpful to fully block or allow a domain based on your desired outcome. The White/Black List tab allows you to create and manage custom block and allow lists. You can associate these lists with all policies (global) or assign them ...

    • API Access

      API access is available for certain account types, allowing admins to self-manage API tokens for the standard ScoutDNS Operator API. This help article covers the Public Operator API. For access to other APIs, such as the OEM API, please contact ...