Sign In with Multi Factor Authentication

Multi-Factor Authentication (MFA) adds a second layer of security to your ADOC sign-in. When MFA is enabled for your account, you must provide a one-time code from an authenticator app in addition to your username and password before you can access ADOC.

MFA uses the Time-based One-Time Password (TOTP) standard. The one-time code is generated by an authenticator app on your mobile device and changes every 30 seconds.

MFA applies only to users signing in with a username and password. If you sign in through Single Sign-On (SSO), you will not be prompted for an MFA code.

Before You Begin

Before you begin, install one of the following authenticator apps on your mobile device:
- Google Authenticator
- Microsoft Authenticator
- Free OTP
Open the application and scan the QR code.
Enter the one-time code provided by the application.
Enter a device name to help you manage your OTP devices
Click Submit to complete the setup process.

Sign In with MFA

Sign In After MFA Is Enabled

Once MFA is enabled for your account, each sign-in requires a one-time code after your username and password.

Open your ADOC login page and enter your username and password. Click Sign In.
ADOC displays the One-time code screen.
Open your authenticator app and locate the ADOC entry. Copy the six-digit code displayed.
Enter the code in the One-time code field and click Log in.
You are signed in to ADOC.

One-time codes expire every 30 seconds. If the code expires before you click Log in, open your authenticator app, wait for the next code to appear, and enter it instead.

Lost Access to Your Authenticator App

If you lose access to your authenticator app — for example, because you changed devices or uninstalled the app — you cannot complete the MFA step and will not be able to sign in.

Contact your ADOC administrator and request an MFA credential reset for your account. After the reset, you will be prompted to set up your authenticator app again on your next sign-in.

For Administrators

Tenant administrators can enable or disable MFA for their tenant and reset MFA credentials for individual users using the ADOC Admin API. All MFA management endpoints require the MODIFY_SSO_SETTINGS permission.

API Endpoints

Method	Endpoint	Description	Success Response
POST	`api/mfa/enable`	Enables MFA for the tenant. All users signing in with a username and password are required to complete the TOTP step.	{ "success": true }
POST	`api/mfa/disable`	Disables MFA for the tenant. Users can sign in with username and password only.	{ "success": true }
POST	`api/mfa/reset/{userId}`	Removes all TOTP credentials for the specified user. The user is prompted to re-enroll their authenticator app on next sign-in.	{ "success": true, "userId": "<id>" }
GET	`api/mfa/status`	Returns the current MFA enabled or disabled state for the tenant.	{ "success": true, "enabled": bool }

Enable MFA

Send the following request to enable MFA for your tenant:

POST api/mfa/enable

On success, all subsequent username and password sign-ins for users in your tenant will require a TOTP code. Users already signed in are not affected until their next sign-in.

Disable MFA

Send the following request to disable MFA for your tenant:

POST api/mfa/disable

If your Acceldata deployment has environment-level MFA enforcement enabled, your tenant may not be permitted to disable MFA. Contact your Acceldata account team for more information.

Check MFA Status

To check whether MFA is currently enabled for your tenant:

GET api/mfa/status

Example response:

{ "success": true, "enabled": true }

Reset a User's MFA Credentials

If a user has lost access to their authenticator app, send the following request to remove their TOTP credentials. Replace {userId} with the user's ADOC user ID.

POST api/mfa/reset/{userId}