{"id":84616,"date":"2023-06-05T13:11:28","date_gmt":"2023-06-05T17:11:28","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=84616"},"modified":"2023-09-12T10:53:25","modified_gmt":"2023-09-12T14:53:25","slug":"user-workflow-with-mfa","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa","title":{"rendered":"User Workflow with MFA"},"content":{"rendered":"\n<p>After you configure TOTP MFA, use this article to learn about the workflows your users have for the following:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/About-the-User-Workflow-for-TOTP-MFA#InitialSetUp\">Initial Set Up<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/About-the-User-Workflow-for-TOTP-MFA#ExpiringEnrollment\">Expiring Enrollment<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/About-the-User-Workflow-for-TOTP-MFA#Login\">Login After TOTP MFA Setup Completed<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Initial Setup<\/h2>\n\n\n\n<ol>\n<li>The user receives an email, stating they are required to set up TOTP MFA for their JumpCloud account.<\/li>\n\n\n\n<li>They click the link in the email or log in to the JumpCloud User Portal.<\/li>\n\n\n\n<li>They are prompted for username and password.<\/li>\n\n\n\n<li>They click the&nbsp;<strong>user login<\/strong>&nbsp;button.<\/li>\n\n\n\n<li>Username and password are authenticated.<\/li>\n\n\n\n<li>They are prompted to set up TOTP MFA. They can dismiss this prompt until the enrollment period ends. If they dismiss the prompt, they are reminded of the number of days remaining in enrollment.<\/li>\n\n\n\n<li>If they click&nbsp;<strong>continue<\/strong>, they are provided a QR code and TOTP token that can be used to configure a qualified TOTP token app, and are then prompted for their first TOTP token produced by the TOTP token app.&nbsp;<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>JumpCloud recommends that your users use the&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-protect-for-admins\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Protect<\/a> app for TOTP.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"8\">\n<li>For backup purposes, we recommend that users copy and paste their TOTP key string below the QR code and store it in a secure location. This key can be used to reset TOTP MFA if a users loses their device with the TOTP token app.<\/li>\n\n\n\n<li>After successful token submission, the user is notified that MFA setup is complete.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Expiring Enrollment<\/h2>\n\n\n\n<p>When a user&#8217;s enrollment is close to expiring, they are sent a reminder 24 hours in advance notifying them that their TOTP MFA enrollment period is about to expire. After their enrollment period expires, they are locked out of the User Portal until their TOTP MFA requirement is removed by an administrator or their enrollment time is extended. See <a href=\"https:\/\/jumpcloud.com\/support\/configure-totp-mfa-for-user-accounts\" target=\"_blank\" rel=\"noreferrer noopener\">Configure TOTP MFA for User Accounts<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Logging in to the User Portal After MFA Setup<\/h2>\n\n\n\n<p>After a user has configured TOTP MFA for their account, an admin has required MFA on the User Portal for the user, and a TOTP app is installed and linked with the user&#8217;s account, the TOTP MFA User Portal login experience is as follows:<\/p>\n\n\n\n<ol>\n<li>The user goes to<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/\" rel=\"noreferrer noopener\">&nbsp;https:\/\/console.jumpcloud.com<\/a>.<\/li>\n\n\n\n<li>They are prompted for username and password.<\/li>\n\n\n\n<li>They click the&nbsp;<strong>user login<\/strong>&nbsp;button.<\/li>\n\n\n\n<li>Username and password are authenticated.<\/li>\n\n\n\n<li>They are prompted for the TOTP token, which they obtain from their TOTP app, such as JumpCloud Protect. The user has 60 seconds to enter the 6-digit token code from their TOTP app into the JumpCloud TOTP field. Nearing the end of the 60-second cycle, their MFA app indicates the current key is about to expire, and the user should wait until a new key is generated.<\/li>\n\n\n\n<li>They click the&nbsp;<strong>user login<\/strong>&nbsp;button.<\/li>\n\n\n\n<li>Their TOTP token is authenticated.<\/li>\n\n\n\n<li>They are logged in to the User Portal.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>TOTP attempts are not unlimited. Allowed number of user attempts is set by the IT Admin; admin attempts are limited to five.&nbsp;If settings are selected, that will count toward password or MFA attempts.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Here&#8217;s a guided simulation: <a href=\"https:\/\/university.jumpcloud.com\/courses\/user-portal-mfa-totp-login\" target=\"_blank\" rel=\"noreferrer noopener\">User Portal MFA TOTP Login<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>After you configure TOTP MFA, use this article to learn about the workflows your users have for the following: Initial [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2955,2908,2854],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>User Workflow with MFA - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about the different user workflows for the various JumpCloud supported MFA factors.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"User Workflow with MFA\" \/>\n<meta property=\"og:description\" content=\"Learn about the different user workflows for the various JumpCloud supported MFA factors.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-12T14:53:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\",\"url\":\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\",\"name\":\"User Workflow with MFA - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:28+00:00\",\"dateModified\":\"2023-09-12T14:53:25+00:00\",\"description\":\"Learn about the different user workflows for the various JumpCloud supported MFA factors.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"User Workflow with MFA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"User Workflow with MFA - JumpCloud","description":"Learn about the different user workflows for the various JumpCloud supported MFA factors.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa","og_locale":"en_US","og_type":"article","og_title":"User Workflow with MFA","og_description":"Learn about the different user workflows for the various JumpCloud supported MFA factors.","og_url":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa","og_site_name":"JumpCloud","article_modified_time":"2023-09-12T14:53:25+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa","url":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa","name":"User Workflow with MFA - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:28+00:00","dateModified":"2023-09-12T14:53:25+00:00","description":"Learn about the different user workflows for the various JumpCloud supported MFA factors.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/user-workflow-with-mfa#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"User Workflow with MFA"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84616"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84616\/revisions"}],"predecessor-version":[{"id":93936,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/84616\/revisions\/93936"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=84616"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=84616"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=84616"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=84616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}