Skip to main content

Admin Setup

These steps make the AuthNull Authenticator your organization's MFA provider and get your users enrolled.

1. Make It Your MFA Provider​

Open the account menu (top right), choose Settings, then MFA Provider, and select the AuthNull Authenticator card. There are no credentials to enter. Only one provider is active at a time, so remove Duo Security or Okta Verify first if one is saved. See MFA Providers.

2. Invite Your Users​

Each user needs at least one enrolled phone. You can invite users in three ways:

  • One user - on Users, open the user's ⋯ menu and choose Register device. Choose Send by email, or Show invite to get a link and QR code you can share directly. Use Show invite for users with no email address.
  • Everyone not set up yet - under Settings → MFA Provider, Invite everyone who isn't set up yet emails an invite to every user without a phone. You can set an optional deadline, and reminder emails go out before it.
  • New users automatically - turn on Email an Authenticator invite to new users. Users added from the console, an import or tenant sign-up then receive an invite with a QR code, a link and an activation code.

Users then follow User Setup.

3. Choose the Phone Settings​

Under Adding phones in the Authenticator settings:

SettingWhat it does
Phones per user1 to 10. A user at the limit signs an old phone out before adding a new one.
Check before a new phone is addedApprove on another phone or email code, approve on another phone, or an admin approves each new phone.
Users can add a phone by signing in to the app with their passwordLets users add a phone without an invite.
Number matchingOff, only for risky sign-ins, or always.

When an administrator must approve new phones, pending phones appear under Phones waiting for approval. Approve only phones you expect: an approved phone can approve that user's sign-ins.