Enabling Phone PIN

If you select Phone Call as an authentication mechanism for users, then those users must create a PIN to authenticate into Privileged Access Service using their phones. By default, all users can create a PIN. To enable or disable, see the instructions below. The phone PIN configuration option is only available for new tenants as of 17.10.

To enable or disable a phone PIN:

1. Log in to Admin Portal.

2. Click Access > Policies and select the policy you want to edit or click Add Policy Set to create a new one.

3. Click User Security Policies > User Account Settings.

4. Select Yes or No in the “Enable users to configure a Phone PIN for MFA” drop-down list.

   

5. (Optional) Specify the minimum PIN length users must create.

6. (Optional) Specify the authentication profile users must use to configure and edit their PINs.

   The authentication profile is where you define the authentication methods. If you have not created the necessary authentication profile, select Add New Profile at the bottom of the drop-down list. See Creating Authentication Profiles

7. Click Save.

   Users create their PINs at Profile > Account > Organization > Phone PIN.