Set up platform administrator MFA

Use a compatible authenticator app. The setup is valid for ten minutes and is bound to this browser and administrator account.

Start initial enrollment

Enter the one-time credentials supplied by the operator. They are sent in the request body and never placed in the browser address.

Administrator email Generated password Enrollment bootstrap code

Replace enrolled authenticator

This requires recent verification with your current password and MFA. Completing replacement revokes all platform-admin sessions.

Confirm your identity

Current password Current authenticator or recovery code

Add the pending factor

QR code for the pending authenticator factor

Scan the QR code locally rendered by sso-now, or enter this key manually:

Code from the new authenticator

Save your recovery codes

These codes are shown once. Store them securely before acknowledging. Every existing platform-admin session has been revoked.

I saved the recovery codes in a secure location

MFA enrollment complete

Your new factor is active. Sign in again with the new authenticator because all previous sessions were revoked.

Return to platform administrator sign in

Back to sign in