Rubex offers two methods of two factor authentication designed to help you secure your account. This guide will cover what they do and how you, the user, utilize them. Through two factor authentication, you can receive a one-time six digit passcode that can be used alongside your normal login credentials to increase the level of security on your Rubex account.
Enabling Two Factor Authentication
Two factor authentication can be set up two ways:
- At the user level - An individual user or guest user on your account can choose to enable 2FA on their account from their user settings.
- Through a security policy - An administrator on the Rubex account can require 2FA to be used as part of a security policy.
At the User Level
When logged in to Rubex, you can enable 2FA on your account at the user level by performing the following steps:
- Start by clicking on the main menu icon at the top left of your screen and selecting 'My Settings'.
- In the page that follows, scroll down and look for the section labeled 'Two Factor Authentication'.
Three options will be available for you to choose from after you enable it: Mobile Authenticator App, Email Token, or 'Either'. We will be discussing what each of these mean later on in this guide.
Through a Security Policy
Security policies can be designed by an Administrator on the Rubex account, and are created from the Admin panel itself. Administrators can set these up using the following steps:
- Log in to Rubex using your account.
- Click on the main menu icon at the top left of the Rubex page and select 'Admin'.
- In the Admin panel itself, click on the 'Security Policies' setting on the left hand side of the screen.
- From here, you can create and design a security policy that fits your companies needs.
Once you've created a security policy, you can enable these on a per-user, per-group, or even choose it as a default security policy for all users and guests on your Rubex account.
Similar to setting it up at the user level, you can choose from three different two factor authentication options: Mobile Authenticator, Email Token, or 'Either.' In the next section we'll go over what those mean.
Two Factor Authentication Options
Whether it's through a security policy or set up on an individual user through their own user settings, the options available to you are the same. Each setting
Mobile Authenticator App
The mobile authenticator app option for two factor authentication gives you the ability to generate the six digit passcode directly from your smart phone through the use of an 'authenticator app'.
- You must have a smart phone
- We recommend the use of either Google Authenticator or Microsoft Authenticator, both can be found on the iOS App Store or Google Play Store, depending on your phones operating system.
- Your smart phone must be able to scan QR codes with its camera.
When you log in for the first time after setting up 2FA on your account, you will receive a QR code in your email inbox. Once received, use the 'Scan QR Code' option in your authenticator app on your smart phone to scan it.
Once scanned, this will create a profile within the authenticator app that will begin generating six digit passcodes for you to use when logging in to Rubex.
The email token takes away the need to use your smartphone for logging in and instead sends a single use six digit passcode to your email inbox directly.
This six-digit code you receive in your inbox has a 10 minute expiry, can only be used once. You will receive a new one every time you attempt to log in, and the most recent received code must be used when logging in.
The 'Either' setting in your two factor authentication app allows you to use both, giving you some flexibility when logging in.
When logging in, you will receive both a QR code and an email token in your inbox, and the codes from either can be used when logging in.