Who can do this?
-
All users and access levels: Can set up own 2FA settings
-
Full Access: Can make 2FA mandatory or optional for all group users
Two-factor authentication (2FA) adds an extra layer of security to your Halaxy account. When you sign in to Halaxy, 2FA requires you to enter an authentication code that you receive by SMS, email or Google Authenticator.
2FA combines something you know (your password) with something you have (your device). Even if someone else knows your password, 2FA ensures that only you can sign into your account.
Note
Two-factor authentication is automatically mandatory for all users in a practice group where someone has connected their Halaxy to Xero, as a security requirement by the Australian Taxation Office.
-
Click Settings > Users.
-
Next to your name, click the
cogwheel icon.
-
Select the method that you want to receive the authentication code:
-
None: Disables 2FA for your account. You can enable it again anytime.
-
SMS: The authentication code will be sent to the mobile number you enter.
-
Email: The authentication code will be sent to the email address you enter.
-
Google Authenticator: Scan the displayed QR code using your Google Authenticator app, then click Validate. Validate. This creates an entry for Halaxy in the app. Whenever you sign in to Halaxy, open Google Authenticator to find your authentication code.
-
-
Click Validate.
-
Enter the code you receive through the method you selected.
-
Click Submit.
You have successfully set up two-factor authentication for your account.
If 2FA is mandatory for any of your practice groups, you cannot disable it. If your group mandates a particular authentication method, you can only select that method.
Note
If you are a Full Access user, you can enable 2FA for individual users in your practice group, but only they can complete the validation.
Caution
Google Authenticator is the only supported 2FA app for Halaxy. Other apps are not guaranteed to be compatible with Halaxy.
Full Access users can enable or require 2FA for a practice group, prompt other users to enable 2FA on their next login, or select one 2FA method for group users.
To configure 2FA settings for your group, follow the steps below.
-
Click Settings > Users.
-
Next to your practice group name, click the
2FA icon.
-
In the pop-up, select your Group 2FA Setting:
-
Optional: Users can enable or disable 2FA anytime.
-
Prompt on login: Users are alerted to enable 2FA on their next login.
-
Mandatory: Users must set up 2FA at their next login.
-
-
Select your Group 2FA Method. The option you select here will be used as the authentication method for all users in your practice group.
-
Click Save.
Updated
<%= heading %>