Enrollment

Once you've signed up for Identity360 and log in for the first time, you have to enroll for the MFA methods configured by your administrator. Identity360 offers the following MFA methods:

• Email Verification
• Google Authenticator
• Microsoft Authenticator
• Zoho OneAuth TOTP
• Custom TOTP authenticator

By default, you are automatically enrolled to receive email verification codes using your primary email address. Depending on the administrator policy, you can enroll in other MFA methods as well.

Enrollment process

Enrollment can work in two ways:

1. Optional enrollment: Your admin can configure MFA methods and lets you choose to enroll in them or not.
2. Enforced enrollment: You are mandated to enroll in specific MFA methods after completing authentication.

Optional enrollment

Here are the optional enrollment steps for each MFA method supported by Identity360:

Email Verification

In addition to your primary email address, you may have the option to enroll a secondary email address to receive email verification OTPs. To do so:

1. Log in to Identity360. Go to the MFA Enrollment tab.
2. Under Enrolled MFA Methods > Email Verification > select + Add Email Address.
3. In the Add Secondary Email Address pop-up that appears, enter the secondary email address you wish to use for MFA in the Enter email address field and click Send OTP.
4. Enter the verification OTP sent to your secondary email in the Enter OTP field and click Verify OTP.
5. If successful, your secondary email address will be added under the Email Verification section.

Google Authenticator

Here's how to enroll for Google Authenticator

1. Open Identity360 and go to the MFA Enrollment tab.
2. Navigate to Set up Optional MFA Methods > Google Authenticator.
3. Click Setup to open the Google Authenticator pop-up.
4. Install the Google Authenticator app on your mobile device.
5. Open the app, and click Add a code or + to add your account. Select Scan a QR code.
6. Using the app, scan the QR code displayed on the enrollment page.

Note: If you're unable to scan the code, click Unable to scan the QR code? and follow this process.

7. A TOTP will be generated in the app. Enter this in the field provided in the pop-up and click Verify Code.
8. You are now successfully enrolled in Google Authenticator.

Microsoft Authenticator

Here's how to enroll for Microsoft Authenticator

1. Open Identity360 and go to the MFA Enrollment tab.
2. Navigate to Set up Optional MFA Methods > Microsoft Authenticator..
3. Click Setup to open the Microsoft Authenticator pop-up.
4. Install the Microsoft Authenticator app on your mobile device.
5. Open the app, and go to Add Account > Other account (Google, Facebook, etc,).
6. Using the app, scan the QR code displayed on the enrollment page.

Note: If you're unable to scan the code, click Unable to scan the QR code? and follow this process.

7. A TOTP will be generated in the app. Enter this in the field provided in the pop-up and click Verify Code.
8. You are now successfully enrolled in Microsoft Authenticator.

Zoho OneAuth's time-based one time (TOTP) passcode

Identity360 supports Zoho OneAuth app's TOTP authentication method. Here's how to enroll for it:

1. Open Identity360 and go to the MFA Enrollment tab.
2. Navigate to Set up Optional MFA Methods > Zoho OneAuth TOTP.
3. Click Setup to open the Zoho OneAuth TOTP pop-up.
4. Install the Zoho OneAuth app.
5. Open the app. Go to Authenticator > OTP Authenticator.
6. Click the + and select Scan the QR secret.
7. Using the app, scan the QR code displayed on the enrollment page.

Note: If you're unable to scan the code, click Unable to scan the QR code? and follow this process.

8. A TOTP will be generated in the app. Enter this in the field provided in the pop-up and click Verify Code.
9. You are now successfully enrolled in Zoho OneAuth TOTPs.

Custom TOTP authenticator

You administrator can also choose to configure a custom TOTP authenticator for MFA. Here's how to enroll in this method:

1. Open Identity360 and go to the MFA Enrollment tab.
2. Go to Set up Optional MFA Methods and find your custom TOTP provider.
3. Click Setup to open the custom TOTP authenticator's pop-up.
4. Install and open the custom TOTP provider's app on your mobile device.
5. Navigate to the section where you can add your account.
6. Using the app, scan the QR code displayed on the enrollment page.

Note: If you're unable to scan the code, click Unable to scan the QR code? and follow this process.

7. A TOTP will be generated in the app. Enter this in the field provided in the pop-up and click Verify Code.
8. You are now successfully enrolled in your custom TOTP authenticator.

Unable to scan the QR code?

If your mobile device's camera isn't functional and the QR code cannot be scanned:

• Click Unable to scan the QR code?
• A secret key will now be displayed. Copy this.
• Open the authenticator app and paste the copied secret key. Depending on the app, the field to paste the secret key can be found under:
• Google Authenticator: Click Add a code > Enter a setup key.
• Microsoft Authenticator: Click + > Scan a QR code > Or Enter Code Manually.
• Zoho OneAuth: Click Authenticator > OTP Authenticator > + > Scan QR code > Enter code manually.
• Custom TOTP authenticator: Contact your administrator for assistance.
• Once the secret key is pasted, a code will be generated in the authenticator app. Copy it and paste it in the Enter Verification Code field provided in the Identity360 portal.

Enforced enrollment

When you log in to Identity360 or your Windows machine, you will be forced to enroll if MFA is enabled based on your organization's policies.

Click Setup Now to proceed with the enrollment process. The enforced method(s) will appear.

The enrollment steps for each method are the same for optional enrollment and enforced enrollment.

Managing enrollment information

You can also modify or delete your enrollment information in the MFA Enrollment tab.

How to modify enrollment information:

For email verification

Based on the admin configuration, if you have multiple email addresses enrolled, you can choose which email address will receive OTPs. For this:

1. Click the MFA Enrollment tab. Go to Enrolled MFA Methods
2. Under Email Verification, click the Set as default email icon ( ) to designate an email address as the default one for receiving OTPs for MFA.

For other MFA methods:

1. Open the MFA Enrollment tab. Under Enrolled MFA Methods, navigate to the MFA method you want to enroll in and click the edit icon ().
2. In the pop-up that opens, select Change device.
3. Re-enroll in the MFA method using your preferred mobile device.

How to delete enrollment information

For email verification:

While you cannot delete your primary email address, you can delete the secondary email address. To do this:

• Open the MFA Enrollment tab. Go to Enrolled MFA Methods.
• Under Email Verification, click the delete icon () available next to the secondary email address.

For other MFA methods:

1. Open the MFA Enrollment tab. Under Enrolled MFA Methods, navigate to the MFA method you want to enroll in and click the edit icon ().
2. In the pop-up that opens, select Remove.
3. In the confirmation pop-up that appears, click Yes.