How to revoke Multi-Factor Authentication (MFA) for users

About

Multi-Factor Authentication (MFA) is set up with the use of an authentication app or via SMS messaging to receive the authentication code for login.

To provide more control around this, we have introduced the ability for the account owners to revoke MFA from the Reckon Accounts Hosted Control Panel for active users in their account. This may be useful where an employee has left the business or where a mobile has been lost, and the recovery PIN isn't available.

This will revoke MFA on the Reckon Accounts Hosted account and the associated Reckon Portal account for that user.

There are three Role types:

1. Owner
2. Administrator
3. User

How to identify your Role type?

1. Log in to https://hosted.reckon.com
2. Click on Control Panel
3. Select Manage Users under User Management
4. Your current role type will be listed in the Role column.

How to change your Role type?

1. In Manage Users, click on the User ID
2. In the User Details section, click on the Role dropdown
3. Select the appropriate role type for the user account
4. Then, click on Update

How to revoke MFA?

1. Log in to https://hosted.reckon.com as the Account Owner
2. Click Login Security Settings (MFA) on the dashboard screen.
3. Select the Revoke MFA option.
4. Enter the MFA code received on your current MFA source ie. the existing authenticator app or phone number your MFA is currently set to and click Remove MFA.
5. MFA will be removed from your account, and you will prompt to set it up again the next time you login.

Revoke with Recovery PIN

When you first setup MFA you were provided with a Recovery PIN. This can be used to revoke the existing MFA if you don't have access to the existing MFA source.

1. Login to Reckon Accounts Hosted
2. When the MFA prompt appears, select the option to enter your Recovery PIN
3. Enter your Recovery PIN
4. MFA will be removed from your account, and you'll be prompted to set it up again the next time you login.