How do I Enable and Configure Two-Factor Authentication or Multi-Factor Authentication on my KCM GRC Account?

Enabling multi-factor authentication (MFA) or two-factor authentication (2FA) on your account will require an additional identity verification step at the time you log in. Once MFA is determined mandatory and configured for an account, our system will require the use of an authentication code generated by an authenticator application each time you log in to your account.

If you're an Administrator on your KnowBe4 KCM Governance, Risk and Compliance (GRC) account, or if your account holds sensitive information, it is recommended that you set up MFA for additional security.

Jump to:

Mandate MFA for All Users in KCM GRC
Mandate MFA for Individual User Accounts
Configuring Authenticator Applications for KCM GRC
Set up MFA on Your Own Account
Troubleshooting

Mandate MFA for All Users in KCM GRC

If you're an account admin, follow these steps to mandate MFA for all users on your account:

1. Ensure you have downloaded an Authenticator application on your smartphone. Possible apps include Google Authenticator, Authy, and LastPass, among others.
2. Click Settings at the top-right of the page, then click Account Settings.

3. From the View Account page, select the Account Settings tab, as shown below.

4. Scroll to the bottom of the page. On the left-hand side, you'll find the Secure MFA Login drop-down menu (shown below). Select Mandatory to require all of your users to use an authenticator application when logging in to their accounts.

5. Be sure click the Save button to save the changes made to your account.

Once you've changed this account-wide setting to Mandatory, you'll have to configure MFA for your own account the next time you log in. See the Configuring Authenticator Applications for KCM GRC section below for details. 

Back to Top

Mandate MFA for Individual User Accounts

If you're an account admin, follow these steps to mandate MFA for individual user accounts:

1. Once you've logged into your account, click Settings at the top-right of the page, then click Manage Users.

2. From the Manage Users page, find the user for which you'd like to mandate MFA. Click the update user icon on the right-hand side (shown below) to update the user's account information.

3. From the User Management page, ensure the Settings tab is active, then click the Require MFA toggle. Click the Save button to save this change.

Once you've updated this user setting, the user will be prompted to configure their Authenticator Application upon their next login.

See the next section for details on configuring authenticator applications for KCM GRC.

Back to Top

Configuring Authenticator Applications for KCM GRC

If your account admin has mandated MFA for your account, you will be prompted to configure your authenticator application the next time you log in. Follow the steps below:

1. If you haven't already, download an authenticator application on your smartphone. Possible apps include Google Authenticator, Authy, and LastPass, among others.
2. Using the authenticator application on your smartphone, capture the QR barcode shown in your KCM GRC account (pictured below). If this method is not successful, you can manually enter the Secret Token shown on this page.
3. Once your authenticator application has recognized this QR code (or Secret Token) it will add "KB4 Compliance" to your application and begin to render authentication codes. Enter the first code in the Verify Code 1 field in your KCM GRC account. The console will automatically verify the accuracy of the code you provide.
4. Wait until your application renders another code, then input this value into the Verify Code 2 field.
5. Once both codes have been verified, the Enable Secure MFA Login button will be active, click this button to complete the setup.

Back to Top

Set Up MFA on Your Own Account

If you'd like to enable MFA for your own account follow the steps below: 

1. Ensure you've downloaded an authenticator application on your smartphone. Possible apps include Google Authenticator, Authy, and LastPass, among others.
2. Log into your account and click your name at the top-right of the screen, then click Profile.

3. From the User Profile screen, click the Set Up MFA button (see below).

4. You will be directed to the Enable MFA screen, shown below. Follow steps one through four from above (found here) to configure your authenticator application for your KCM GRC account.

Back to Top

Troubleshooting

If you're an admin and one of your users is unable to log into their account due to issues with Multi-factor authentication, follow the steps below to reset the user's MFA.

1. Once you've logged into your account, click Settings at the top-right of the page, then click Manage Users.

2. From the Manage Users page, find the user who needs their MFA reset. Click the pencil icon on the right-hand side.

3. Click the Reset MFA button on the left-hand side of the User Management page, as shown below.

4. When prompted with Are you sure you want to reset MFA? click the Reset MFA button.

5. Click OK.

The user will now be able to reconfigure their authenticator application for KCM GRC. For instructions, see the Configuring Authenticator Applications for KCM GRC section, above.

Back to Top