Two-Factor Authentication (2FA)

Overview

Two-Factor Authentication (2FA) is a secure login verification technology. Once enabled, in addition to the password, users must enter a 6-digit dynamic security code generated by an authenticator app when logging into the management console, enhancing account security.

Supported authenticator apps include 1Password, Authy, Microsoft Authenticator, etc.

Steps

1.1 Binding

2FA Binding

1. Open the Two-Factor Authentication page; a QR code is displayed.
2. Scan the QR code with a supported authenticator app (if you cannot scan, click Scan failed? to reveal the secret string and enter it manually into the authenticator).
3. Optionally change the Issuer (used to identify this account in the authenticator app).
4. Enter the 6-digit code generated by the authenticator into the Enter Security Code field.
5. Click Bind to complete the initial binding.

1.2 Login After Binding

2FA Login

• After binding, the next time you log into the management console, in addition to your password, open the authenticator app and enter the currently displayed 6-digit security code to log in.

1.3 Unbinding

2FA Unbinding

1. When bound, the page shows "Successfully bound"; click to expand the unbind form.
2. Enter the current 6-digit code from your authenticator into the Enter Security Code field.
3. Click Unbind; the original binding becomes invalid.

Field Reference

Field	Description
Issuer	Used to identify this account in the authenticator app; customizable.
Enter Security Code	The 6-digit dynamic code generated in real time by the authenticator app. Required.

FAQ

If an admin enabled 2FA login but lost access to the authenticator, SamWaf allows running the following command in the program directory to clear the existing 2FA binding:

SamWafLinux64 resetotp

After running it, the existing 2FA binding is cleared and password-only login is restored.