Activate Rainbow Multi-Factor Authentication (MFA) in your Company

Is safety at the heart of your concerns? You can strengthen the security of your Company members' Rainbow accounts by enabling multi-factor authentication (MFA). To put it simply, this will allow your members to link a cell phone to their Rainbow account in order to benefit from an additional identity check when logging in.

Warning: Enabling multi-factor authentication (MFA) for members of your company will not force them to use this method. Activating this security feature is the responsibility of each user in your Company. Learn more

Add multi-factor as authentication method

Multi-factor authentication is an additional layer of security for Rainbow identification. You can authorize it within your company like any other authentication method.

1. Access your company's administration center by clicking on the icon in the main menu.
2. In the left-hand menu, select " My company" then " Settings".
3. Click on the "Security" tab to configure how your users connect to Rainbow.
4. Click on the icon to add a new authentication method, then choose "Rainbow multifactor athentication" from the list. Click on the "Next" button to begin configuration.
5. Choose a name for this authentication method or keep the default name "My Rainbow MFA".
6. You can define how often your members will have to re-authenticate from the same device. By default, without activating the " Allow users to remember their applications / browsers" option, your members will have to use the MFA for each connection. Click on the "Next" button to continue configuration.
7. Activate this authentication method for all your members by clicking on the " Use as default authentication method" button, or activate it on a member-by-member basis later then click on the "Save" button.
8. Your Rainbow MFA is now ready! Edit the method by clicking on the icon or delete it by clicking on the icon .

Tips: As with all authentication methods, you can choose to activate it by default for all your members, or select the accounts concerned individually.

Check or reset multi-factor authentication status for your members

You cannot force your company to use multi-factor authentication. However, you can check whether or not a user has activated this security directly from the member administration space.

1. Access your company's administration center by clicking on the icon in the main menu.
2. In the left-hand menu, select " My company" then " Members".
3. Click on one of your members, then on the "Security" tab.
4. Check that your member has access to multi-factor authentication. The name of your connection method should appear in the "Sign-in method" field.
5. You can then check the MFA status foir this member. Enabled means that your member has configured it on his or her side, while Disabled means the opposite.

Tips: If a member's account is blocked due to an error (e.g. inability to generate a 6-digit code), you will be able to click on a "Reset" button, which will remove the multi-factor authentication configuration and allow the member to log in with his or her Rainbow credentials without any further security checks.

Note: Once authorized within your company, each member of your Company can activate or deactivate this security using a mobile application. We recommend the use of Google Authenticator, Authy or Microsoft Authenticator. Learn more