Use this guide to enable multi-factor authentication (MFA) for users in Sharpen. MFA adds a second step at sign-in by requiring users to enter a temporary code from an authenticator app after they enter their password.
In Sharpen, MFA is enabled at the User Group level. When you turn it on for a group, every user in that group is prompted to set up MFA the next time they sign in.
Before you begin
Make sure you have the following in place before you start:
A user account that belongs to the Administrators user group.
MFA enabled on your own Sharpen account so the option is available to you.
A plan for which user group you want to start with, especially if you want to roll MFA out in stages.
Before enabling MFA, ask users to install an authenticator app on their phones. This makes setup smoother when they are prompted at their next sign-in.
Turn on MFA for a User Group
Sign in to Sharpen using an account in the Administrators user group.
Open the user group you want to protect. Go to Admin, then Settings, then User Groups, and select the group from the list.
Scroll to the Settings Options section and select the checkbox for MFA.
Click Save at the bottom of the page.
After you save the change, MFA takes effect the next time each user in that group signs in.
What users will experience
The next time a user in the MFA-enabled group signs in, Sharpen will require them to complete MFA setup before they can continue.
Users will connect their account to an authenticator app on their phone. After setup, they will enter a code from that app each time they sign in.
Users are not required to take any action before their next login.
Users who are already signed in can continue working until their current session ends.
Users who are not covered by MFA
MFA follows the user group assignment. A user is only covered if they belong to a group where MFA is enabled.
If a user is not in an MFA-enabled group, you have two options:
Enable MFA for their current group.
Move the user to a group that already has MFA enabled.
You cannot enable MFA for one individual user without enabling it for the rest of their user group. If needed, create a separate user group for those users and enable MFA on that group.
Recommended rollout approach
A phased rollout usually works best. Start with a smaller group so you can answer questions and resolve any setup issues before expanding MFA to more users.
It is also a good idea to notify users in advance. Let them know they will be prompted to set up an authenticator app the next time they sign in. This simple communication step can reduce confusion and support requests.
Support
If you need help enabling MFA, contact Sharpen Support.
FAQ
When does MFA start for users?
It starts the next time a user in the affected group signs in.
Can I enable MFA for one person only?
No. MFA can only be enabled at the user group level.
Do users already signed in get interrupted?
No. They stay signed in until their current session ends.