Set up multi-factor authentication

Understand how to complete the additional security configuration when it is requested during entry.

Multi-factor authentication, also called MFA, adds an identity confirmation to access to Wasa.

What you will do

You will complete the MFA configuration presented during the login to continue securely to the work environment.

Who can do this

Users for whom Wasa requests this configuration during authentication.

Before you start

Start the entry with the account associated with your registration or invitation.
Have a compatible authentication app installed and accessible.
Reserve time to complete the step without sharing the QR code, the manual configuration key or the generated codes.

Menu path

This step does not appear in the internal menu: Enter → Set Up MFA, when requested by Wasa.

Steps

Start entering Wasa.
When the Configure a new authenticator screen appears, open your authenticator application.
In the authenticator application, choose the option to add an account and scan the QR code displayed by Wasa.
If you cannot scan the QR code, choose the manual configuration in the application and enter the Manual configuration key displayed by Wasa.
In the authenticator application, locate the current six-digit code generated for Wasa.
Enter this code in the Six-digit verification code field.
Select Check authenticator.
Wait for Wasa to validate the step and redirect you to a new entry.
Log back in with your account and enter the current authentication app code when prompted.

Expected result

Confirmation is accepted and a new entry is requested. After logging in again, you access the environment available for your account. In subsequent entries, Wasa may request an identity confirmation again.

Common problems

Situation	What to do
The MFA screen does not appear	Continue the input flow normally. The step is presented only when necessary for your account.
The code is rejected	Wait for the application to generate a new six-digit code, enter the current code and select Verify authenticator again.
A code from the old authenticator is rejected	Use the code from the account you just added with the current QR code. An authenticator for a previous identity cannot confirm the new setup.
Wasa says it could not confirm the result	Do not repeat verification or start another QR setup. Ask the person responsible for your account access to check MFA recovery.
New codes continue to be rejected	Enable automatic date, time and time zone setting on the authenticator app device. Then, generate a new code and try again.
The QR code cannot be scanned	Use the Manual configuration Key in the authenticator app. Do not send or share this key.
You do not have access to the authentication app	Stop the attempt and ask the person in charge of your organization to check the access associated with your account. Do not use someone else's authenticator.
An expected option does not appear after entering	Check, in this order: your access profile, the active organization, the invitation associated with the account and the availability of the module.