How to Configure and Enforce Two Factor Authentication (2FA)

This article describes the centralized Two-Factor Authentication (2FA) access control functionality within the FORTH system. It was developed for controlling company Administrators and Super Admins who configure and enforce two-factor authentication security policies across accounts in the FORTH CRM.

The article is organized into the following sections:

• Overview
• Prerequisites
• How to Access
• How it Works
• Troubleshooting / FAQ

• Assistance

   

Overview

Two-factor authentication (2FA) is an identity and access management security method that strengthens account security across the FORTH platform by requiring two separate forms of identification during login. This prevents unauthorized access to sensitive company data and client records by requiring an SMS verification code along with standard user passwords. Centralized access controls at the controlling company level eliminate manual security audits and ensure uniform policy enforcement across all managed companies. Administrators save time by configuring company-wide requirements from a single interface while maintaining access for support tasks.

Prerequisites

• Admin role permissions at the controlling company level.
• Active controlling company account access within the FORTH CRM.
• Valid United States mobile phone numbers capable of receiving standard SMS text messages for all enforced users (international phone numbers are not supported).

How to Access

1. Log in to the FORTH CRM.
2. Click the Admin tab.
3. Select Settings.
4. Click Access Control.
   
5. In the left navigation menu, click Two-Factor Authentication.

How it Works

1. Enable account-level 2FA: On the Two-Factor Authentication page, click the toggle switch at the top of the page to activate 2FA at the global account level.
   
2. Select companies for enforcement: Locate the Manage Company Access section. In the Disabled column, click the name of the company that requires 2FA.
3. Move company to enabled status: Click the single right-facing arrow (>) button. The company moves from the Disabled column to the Enabled column.
   
4. Confirm activation: Verify the confirmation message: "You have successfully turned Two-Factor Authentication on for [Company Name]." The system updates the SMS Notification section under My Settings and on the Edit User page (Admin > Settings) to show that the saved number is linked to 2FA.
   
5. Review user scope and administrative exceptions: Company-level activation enforces 2FA on every user within that company. Individual user exclusions are not supported. Users assigned the Administrator or Super Admin role bypass 2FA when logging in as other users, ensuring administrative support workflows continue without delay.
6. Prompt user at login: When an enforced user logs in, the FORTH CRM displays a verification dialog box.
   With 2FA activated, If the user already has a mobile number on file, the system automatically sends the SMS code. If the user profile lacks a mobile number, the system prompts them to enter a United States mobile number and click Send Verification Code. 
   
7. Submit verification code: Retrieve the SMS code sent to the mobile device. Enter the code into the verification dialog and click Continue. The system validates the code and logs the user into the CRM. 

Troubleshooting / FAQ

Can I enforce 2FA for international mobile phone numbers? No. The FORTH platform currently supports 2FA SMS delivery only to United States phone numbers. International phone numbers cannot receive verification codes.

Can I enable or disable 2FA for an individual user? No. 2FA is managed strictly at the company level. When you enable 2FA for a company, all users assigned to that company must complete 2FA verification on login.

What happens if a user does not have a phone number saved in their profile? The system prompts the user to input and save their mobile phone number during their next login attempt before it issues a verification code.

Why can Administrators access user accounts without entering a 2FA code? Users with the Administrator role have system-level permissions that let them log in as other users to perform support and operational maintenance without requiring the user's mobile verification code.

Do text messaging fees apply to verification codes? Standard message and data rates may apply depending on each user's mobile carrier plan.

What should a user do if the SMS code does not arrive? Check the user profile under My Settings or through Admin > Settings to confirm that the mobile phone number is accurate. Ensure the mobile device has adequate cellular signal reception and can receive standard SMS text messages.

Assistance

For further assistance, reach out to support@setforth.com.