Setting up two-factor authentication on your mobile device

If Single Sign-On is enabled for your Absolute account, this topic is not applicable unless you are excluded from SSO.

To help keep your Absolute user account secure, a two-factor authentication (2FA) verification code is required along with your username and password when you log in to the Secure Endpoint Console. You won't be able to log in until you set up 2FA on your mobile device.

Absolute supports 2FA using the following apps:

  • Google Authenticator™

  • Duo Mobile

    The Push feature is not supported.

  • Microsoft Authenticator

Absolute has tested and validated 2FA on iOS and Android devices using the applications listed above. If you prefer to use another 2FA application, you should be able to use any app that supports time based one time passwords (TOTP).

Setup consists of the following key steps:

Step 1: Download and install the 2FA app of your choice on your mobile device.

Step 2: Ensure your device shows the correct date and time for your time zone.

Step 3: Scan a QR code to add your Absolute user account to the app.

Step 4: Verify that you can log in to the Secure Endpoint Console using the generated verification code.

This section contains detailed steps for setting up the Google Authenticator app. If you are using another 2FA app, refer to the app's documentation for details about setting up a new account.

To set up 2FA:

  1. On your mobile device, download and install a 2FA app of your choice, and then set the correct date and time.

    For example, on the Google Authenticator app:

    1. Do one of the following:

      • On an iOS device, go to the App Store and search for, download, and install the Google Authenticator app.
      • On an Android device, go to the Google Play Store and search for, download, and install the Google Authenticator app.

    2. Set the date and time on your mobile device by doing one of the following:

      1. On your device, tap Settings > General > Date & Time.
      2. If the Set Automatically switch is not enabled, enable it. This setting automatically sets the date and time on your device based on your time zone.
      3. Close Settings.
      1. Open the Google Authenticator app on your device and tap > Settings.
      2. Tap Time correction for codes and tap Sync Now.
      3. Close the Google Authenticator app.
  2. Go to the Absolute login page and attempt to log in by entering your email address and password. The Enable Two-Factor Authentication dialog shows. Leave this dialog open.
  3. Open the 2FA app on your device.

  4. Add your Absolute user account to the app.

    For example, to add your Absolute user account to the Google Authenticator app:

    1. Tap the + icon and tap Scan a QR code. The camera is activated.

    2. Use your device to scan the QR code on the Enable Two-Factor Authentication dialog.

      The email address associated with your Absolute user account is added to the app on your device and a six digit verification code shows. Note that the code changes every 30 seconds.

      1. Tap the + icon and tap Enter a setup key.
      2. In the Account field, enter the email address you use to access your Absolute account.
      3. In the Enter code field, enter the 32-digit key that shows directly under the QR code on the Enable Two-Factor Authentication dialog.
      4. Ensure that the Time based option is selected and tap Add.

  5. On the Enable Two-Factor Authentication dialog, do the following:

    1. In the Enter verification code field, enter the six digit code that currently shows in the app.

      If an Invalid code error message shows on the dialog, the verification code failed for one of the following reasons:

      • The code has expired because too much time has elapsed since the code was generated. Wait for the app to generate a new code and then enter it.

        If you're using Duo Mobile, enter the new code immediately after it's generated to avoid seeing the Invalid code error message again. If this still doesn't resolve the issue, close and reopen Duo Mobile before trying again.

      • The date and time on your device is incorrect. Follow the instructions in step 1b before trying again.
    2. Click Enable Two-Factor Authentication. The Dashboard shows.

Each time you log in, you'll need to open the 2FA app on your mobile device, view the current six digit verification code, and then enter the code along with your password on the Absolute login page.

In the future, if you need to reconfigure the authentication app or switch to a different app, you can reset 2FA for your user account.

If you delete your Absolute user account from the 2FA app, uninstall the app, lose your mobile device, or purchase a new device, you won't be able to log in to the Secure Endpoint Console because you can't generate verification codes. If any of these events occur, contact your Absolute administrator to request a reset of 2FA for your Absolute user account.