What is Multifactor Authentication (MFA) ?

Multifactor authentication (MFA) is a security process that requires users to verify their identity using two or more independent methods.
It typically combines something the user knows (e.g., password), something the user has (e.g., a phone or security token), and sometimes something the user is (e.g., fingerprint or facial recognition).

Why using Multifactor Authentication in TINXGO?

Multifactor authentication (MFA) is essential in our back-office as it secures your event tickets and protects access to sensitive spectator data. Unauthorized access could lead to ticket fraud, data misuse, and privacy breaches.
By requiring multiple authentication methods, we ensure only trusted users can manage critical ticketing operations, preserving the integrity of the ticketing process and safeguarding both event organizers and attendees.
While 2FA — via text, email, or an authenticator app — does not completely cloak you from potential hackers, it is an important step in preventing your account from being accessed by unauthorized users.

How to configure Multifactor Authentication in TIXNGO?

What are authenticator apps?

Authenticator apps are considered more secure than texting. They also offer flexibility when you’re traveling to a place without cellular service. Popular options include Authy, Google Authenticator, and Microsoft Authenticator.
These apps mostly follow the same procedure when you’re adding a new account: you scan a QR code associated with your account, and it is saved in the app.
The next time you log in to your service or app, it will ask for a numerical code; just open up the authenticator app to find the randomly generated code required to get past security.

How to enable 2FA for other users in your organizer?

The step-by-step procedure is available here : Manage Back-Office Accounts

When creating a new account, you can enable 2-Factor Authentication for this user.
When editing an existing account, you can "Enable 2-Factor Authentication for this user" also.

If one of the back-office account experience issues with their MFA, you can restart the MFA enrollment procedure by clicking on the "Send" button

Important note

In case your organizer is using separate accounts for each tournament or competition. Now, you can assign access rights to multiple organizer's accounts for the same email address. /wiki/spaces/TIXNGO/pages/49218175

And if an email has access rights to multiple organizers, the account is placed at a higher security level. Therefore, you cannot disable 2FA for this account unless it is removed from other organizers and retains access rights only to this organizer.