User Roles Admin✗Staff contributor ✗External contributor ✗Pulse user 

This article explains how admin users set up, manage and troubleshoot two-factor authentication (2FA) in Silverfin. It covers enabling 2FA at firm level, disabling it again, and the most common problems users run into.

Table of contents 

Why set up two-factor authentication?

Two-factor authentication (2FA) requires users to enter a code from an "Authenticator" app in addition to their password. This extra step, which users only need to complete once every 30 days on a trusted device, greatly enhances security. With 2FA enabled, all users of your environment, both internal and external, must use it for their Silverfin account.

Users logging in via SSO are exempt from 2FA, as the security rules set for SSO apply instead.

How do I set up two-factor authentication?

As an admin user, you can enable 2FA by following these steps:

  1. Go to the firm level in Silverfin.
  2. Select Users.
  3. Click User Configuration.
  4. Click Enable two-factor authentication.
  5. Confirm by clicking the green Enable Two-Step Verification button.

Once 2FA is enabled, users are prompted to set it up the next time they log in. They can skip this once, but must complete it at their following login attempt.

How do I disable two-factor authentication?

As an admin user, you can disable 2FA by following these steps:

  1. Go to the firm level in Silverfin.
  2. Select Users.
  3. Click User Configuration.
  4. Click Disable two-factor authentication.
  5. Confirm by clicking Disable two-factor authentication in the confirmation window.

Users who have already set up 2FA still need to use it to log in. Contact Silverfin Support if you want 2FA removed for these users. This is not mandatory, though: users can choose to keep using 2FA even after it has been disabled at firm level.

Troubleshooting two-factor authentication

Why is a user still prompted for 2FA after it has been disabled?

If a user is still prompted to log in with 2FA even though you disabled it at firm level, one of the following applies:

  • 2FA is required for another firm: the user is also part of another firm where 2FA is still mandatory.
  • The user set up 2FA earlier: the user had already set up 2FA before you disabled it for your firm.

If 2FA is already disabled for your firm, contact Silverfin Support to request deactivation for specific users.

Can I create one shared account for multiple users?

We do not recommend sharing accounts. Create a separate account for each user instead. If sharing is unavoidable, use an "Authenticator" built into a password manager so the code can be shared securely.

What if a user gets an error or loses the device with their authenticator app?

As an admin user, you can reset a user's 2FA. This sends a new QR code to the user so they can set up their authenticator app again.

  1. Go to the user's profile at firm level.
  2. Click Reset Authentication.

After resetting, ask the user to delete the old Silverfin entry from their authenticator app to avoid confusion.