Urgent for All Admin Users — Two-Factor Authentication is Here
Posted by Wayne Smith on 29 October 2018 11:33 AM
Action Required — Set Up Two-Factor Authentication for All Miva Admin Users

The upcoming Miva 9.12 release enables two-factor authentication for all Miva administrator accounts. This is an important security feature that helps to keep your store and your customer data safe from external threats.

To prepare for two-factor authentication, please do the following:
  • Audit each of your Miva administrator users and verify they have the correct permission level. (Administrators have the highest privileges for making changes in the Miva system.) 
  • Select one of the three two-factor methods below for use by your admins. If needed, purchase, distribute, and configure the USB hardware keys.
  • Communicate your choice to your admins so they are aware of the changes that will take place when they log in to Miva after the 9.12 update.

Two-Factor Authentication Options

  • Time-Based One Time Password (TOTP) – This is the most common version of two-factor authentication. It uses popular apps such as Google Authenticator, Microsoft Authenticator or Authy. Each admin installs the app and then enters a six-digit pin each time they log in to Miva.
  • YubiCloud + YubiKey OTP – This is a physical USB hardware key that is purchased and configured for each admin user. Each time an admin logs in to Miva, they press a button on the key to generate the second factor key.
  • WebAuthn / U2F – This is a separate USB hardware solution that uses a new web standard for authentication.

Once your system is updated to Miva 9.12, each of your admins will be prompted to log in with two-factor authentication. Until two-factor is set up, they will be locked out as admins.

Avoid Confusion – Set Up Two-Factor Authentication Today!

Detailed information on how to set up two-factor authentication for your users can be found in our Docs and Videos.

Note: Two-factor authentication was enabled for all new admins with the Miva 9.10 release. Users who are not admins will not be affected by these changes.

Help Desk Software by Kayako