Two-factor authentication

PERMISSIONS  Refer to Setup > My Info in Permissions.

NAVIGATION  Setup > My Settings

About two-factor authentication

Two-factor authentication (2FA) is a security process in which a second level of authentication is added to the account login credentials. Both factors of authentication must be used and must be entered correctly to establish the person's identity beyond doubt. The two factors may include the following:

  • Something that the user possesses, such as a token, card, or key.
  • Something that the user knows, such as an email address, password, or PIN.
  • Something that is inseparable from the user, such as fingerprint, iris, or voice identification.

IMPORTANT  2FA is enforced for all Datto RMM users. You must complete Multi-factor Authentication (MFA) setup to access your account. If you have not already configured MFA, you will be prompted to do so at your next login.

Requirements

  • 2FA requires login credentials (email and password) and a one-time password (OTP) issued by a 2FA token-generating application.
  • A 2FA token-generating application such as Google Authenticator (Android and iOS) must be installed on your smartphone or tablet.

IMPORTANT  Assign Administrator access to more than one user in the Datto RMM account. This ensures recovery if there is an issue authenticating during the initial configuration, or if the authenticating device encounters a problem or becomes lost.

  1. Navigate to Setup > My Settings.
  2. Click the View in Partner Portal button in the upper-right corner of the My Settings page. The User Settings page in Datto Partner Portal will open.
  3. In the Two-Factor Authentication section, click Configure.

    NOTE  The Two-Factor Authentication section will not be displayed if 2FA has already been configured. If you need to manage your 2FA, refer to Reset and manage 2FA.

  4. From the list of default options in the Choose your authenticator app drop-down menu, select the third-party authenticator app of your choice or Other. If you select Other, enter the name of the app in the Authenticator field that appears.
  5. Use the app you selected to scan the QR code shown on the page.
  6. In the Verification Code field, enter the verification code the app provides.
  7. When finished with the 2FA setup, click Enable 2FA.
  8. You will receive a message confirming the authenticator was configured successfully.
  9. To confirm 2FA has been set up correctly, log out of Datto RMM and log back in. Once you have entered your credentials, you will see a page asking for the 2FA token that your app will generate. Enter the token and click Authenticate.

    NOTE  When accessing the Agent Browser, you will also need to enter the 2FA token. Refer to Log in to the Agent Browser.

  10. If you have more than one account associated with your email address, you will be brought to the account selector page of authweb, where you can select your Datto RMM account. Once logged in, you can use the user switcher to change the account you are signed in to. Refer to Switch User.