Ignite Global Support Home Start a conversation Sign in
Start a conversation
  1. FogBugz Support
  2. Fogbugz- Users
  3. Articles

Two-Factor Authentication

Overview

Two-factor authentication (2FA or TFA) adds an extra layer of security to FogBugz On-Demand by requiring an automatically generated access code in addition to your password when you log in. With 2FA enabled, you can rest easy; only you can log into your On-Demand account, even if your password is compromised or stolen. This is a per-user setting.

 

Introduction

How does the two-factor authentication (2FA) work:

  1. Whenever you log in to FogBugz or Kiln, you will be prompted to enter a verification code.

  2. You need to generate your code using an authentication app on your mobile device or use one of your backup codes.

  3. Please enter the code; that’s it! You will be logged in as usual.

Please also read the What else happens once 2FA is enabled? to understand all the impacts of enabling two-factor authentication.

 

Description

Enabling Two-Factor Authentication

  1. Download and install an authentication app on your mobile device.
    FogBugz 2FA can be used with most Time-Based One-Time Password (TOTP) applications. You can use one of the following apps:
  2. Enable two-factor authentication:

    1. Navigate to the User Options page (Avatar menu > User Options).

    2. Click Enable Two-Factor authentication.

    3. Add a new account to your authentication app (in most apps, you can do this by tapping a plus (+) or ellipsis (…) icon).

    4. Scan the QR code or enter the required details manually.

    5. On the 2FA configuration page, enter the 6-digit code generated by your authentication app.

    6. Click Verify Code.

    7. The next page contains your backup codes. Keep them somewhere safe to be able to log in if you lose your phone.

      Note: Do NOT keep the backup codes protected with the same password that you use for FogBugz.

 

FAQ for Two-Factor Authentication

What else happens once 2FA is enabled?

  • When you first enable 2FA, all existing tokens and sessions (other than the current one) will be deactivated.
  • FogBugz login API command will no longer work; see how to generate an API token.
  • Kiln repositories must be accessed via SSH.
  • The Kiln Client path-guessing feature is disabled (this will be restored in a future release).

 

Can I receive a text message with my code rather than opening an app each time I want to log in? 

This option is currently not available. Let us know if you do not have a smartphone and need SMS support.

 

I cannot get a working access code. How do I log in?

If you lost your phone, deleted your authentication app, or cannot get the codes to work, you can use one of your backup codes to sign in. They were provided to you after you set up two-factor authentication for your account. Note that each backup code can only be used once. However, you can regenerate your backup codes on the User Accounts page.

If you do not have access to your backup codes, contact a Site Admin and have them manually disable two-factor authentication for your account.

 

I am an Admin. How can I disable 2FA for a user? 

On the Users page (Avatar menu > Users), edit the user, then click on the link to disable 2FA.

 

I am an Admin. Can I request that all users enable 2FA or enable it for them?

Two-factor authentication is currently a per-user feature that must be enabled by each user. Currently, there is no option to make 2FA mandatory for all accounts.

 

I am using Android and having trouble verifying my Access Codes. What is the solution?

This issue might be caused by the fact that the time in your Google Authenticator app is not synced correctly. To synchronize it, please follow the steps below:

  1. Go to the main menu in the Google Authenticator app (three dots in the upper right corner)
  2. Tap Settings.
  3. Tap Time correction for codes.
  4. Tap Sync now.

On the next screen, the app will confirm that the time has been synced, and you should be able to use your verification codes to sign in. The sync will only affect the internal time of your Google Authenticator app. It will not change the time settings on your device.

 

I am using iOS and having trouble verifying my Access Codes. What is the solution?

This issue might be caused by the fact that the time on your Authenticator app is not synced correctly. To synchronize it, please follow the steps below:

  1. Go to iOS Settings.
  2. Go to the General section.
  3. Tap Date and Time.
  4. Turn off the Set Automatically option for a few seconds.
  5. Turn it back on.

This will sync the time for the Authenticator app; you should be able to use your verification codes to sign in.

 

Back to Top

Related Articles

Choose files or drag and drop files
Was this article helpful?
Yes
No

  1. Priyanka Bhotika

  2. Posted
  3. Updated

Comments