Introduction to Multi-Factor Authentication

What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication is a way of logging in that requires the user to enter their username and password as usual, but also requires an additional code which is provided to them at the time they’re logging in. In the case of Nimble, this code is provided via an SMS (text message).

• You’re probably already familiar with Multi-Factor Authentication from using services such as online banking.
• You may also have heard Multi-Factor Authentication referred to as 2 Factor Authentication, or 2FA. The terms can be used interchangeably.

How does Multi-Factor Authentication (MFA) work at Nimble?

In summary:

• Nimble provides MFA via SMS (text) message to a mobile phone.
• MFA can be enabled for account users (e.g. Authors and Administrators) and/or learners
• MFA can be configured so that it is mandatory or optional.
  • In mandatory mode, everyone must use MFA.
  • In optional mode, people only need to use MFA if it has been enabled for their login.

Once enabled, when logging in, your account users and learners will see the usual prompt for their email address/username and password. After entering valid credentials, they’ll then be sent an SMS (text) message to their mobile phone. Once they have entered this code, they’ll then be logged in as normal. You can see an example of the MFA prompt below (please note that the Nimble LMS logo will be replaced by your company logo).

When will people be prompted to enter a Multi-Factor Authentication (MFA) code?

The following actions will require an MFA code to be entered:

• Logging in
• Changing password
• Updating another user

How do I set up Multi-Factor Authentication (MFA)?

We’ve built MFA to help Nimble customers looking to address the requirements of the Cyber Essentials scheme. Because of that, as standard, we’ll only enable it for customers that hold a current Cyber Essentials certificate.

To have Multi-Factor Authentication set up on your Nimble account, you need to request it by completing the form here. Once the form has been completed, a member of our team will be in touch as quickly as possible.