Get started with multifactor authentication

ENVIRONMENT: Datto Partner Portal, Backupify/Datto SaaS Protection, Datto RMM, Datto Workplace and File Protection.

This article explains how to set up multifactor authentication (MFA) for Datto SaaS Protection, Datto Partner Portal, Datto RMM, and Backupify Direct users.

Prerequisites

  • Network access: In addition to the Partner Portal (dattobackup.com), you must be able to reach api.qrserver.com over HTTPS in order to configure 2FA and display the QR code image. If this domain is blocked by your firewall or web filter, the QR code will not render during setup.
  • Authenticator app: You must have a supported authenticator app installed on your mobile device (e.g., Google Authenticator, Microsoft Authenticator, Duo Mobile, or any TOTP-compatible app).
  • Individual user account: You must have your own login account. Shared accounts are not supported with MFA, as the system will only authenticate one registered device per account.

NOTE  Multifactor authentication is enforced for all users. You must complete MFA setup to access your account. If you have not already configured MFA, you will be prompted to do so at your next login.

Sharing an account is an insecure practice, and is impractical with MFA, since the system will only dial one phone number for authentication. Make sure each user has an individual login account.

Conventional password protection offers a single layer of security. Passwords are vulnerable to divulgence through human error and defeat through increasingly sophisticated forms of automated attack.

Multifactor authentication provides additional security. After entering your password, the authentication software contacts you via trusted means, such as your mobile phone number, and requests additional verification. This extra protection dramatically reduces the success rate for malicious access attempts.

1. Navigate to your Partner Portal or Backupify login page, enter your account credentials, then click the LOG IN button.

mceclip0.png
Figure 1: The Login window

2. Click Third Party Authenticator App, then click the Enable mfa button.

mceclip2.png
Figure 2: The select Authentication Method prompt

3. Open your authenticator app and scan the QR code to complete the setup.

mceclip1.png
Figure 3: Setup via third-party authenticator app

For additional information, see Set up an external authenticator app for the Datto Partner Portal

Datto supports Duo as its native multifactor authentication app. See Setting up Multifactor Authentication (mfa) with Duofor more information.

You can change employee names or phone numbers used for mfa with partner accounts from the Partner Portal user settings page.

If you log in from an IP address that your Partner Portal admin has allow-listed as a trusted network, you will only receive the authentication prompt every three weeks instead of being prompted on each login. See Datto Partner Portal: Security settings for more information on allow-listing networks.

NOTE  Trusted network allow-listing is unavailable for accounts belonging to end-user organizations of Datto partners; these accounts must authenticate on every login.

Refer to the following for more information: