Overview
Device Authorization allows for added security for logins. Each time a user of the Equus Platform attempts to log into the application from an unauthorized device the user will be required to authorize that device with a code received via email.
User Steps
When a user attempts to log into the system the will see the following page after clicking
A device code will be emailed to the user. It must then be entered on the Device Authorization screen. Note - Each device authorization email is only valid for a set period of time. If the code is not used within that time then a new code must be resent.
Once the code has been entered into the designated field the user should click
to log in.
Remember this Device
The user can also have the system remember the device by checking the Remember this device checkbox. If the user decides to have the device remembered then they will not be required to authorize the device again for the stated amount of time. The device will be remembered by the Equus Platform until the user will be required to re-authorize the device.
They are also certain changes to the device that may require it to be re-authorized (e.g. clearing cookies, change in IP address, etc.). Note: Users should not check the box when using a shared computer.
If the user did not receive an email, they can click
to regenerate a device authorization email.
Invalid Code
If an invalid code is entered an error message will be displayed. Similar to failed password attempts, too many failed device authorization attempts will result in that user account becoming locked. The number of failed attempts the system will allow is dependent on the system level password rule configurations.
The following screen will be seen when a user account has become locked out:
Things to Note
If Multi-Factor Authentication is enabled at a system level, users will have to go through additional steps outlined here together with the Remember this Device configuration.
Unlike failed password attempts the device authorization will only allow for a maximum of 10 failed attempts regardless of the system setting.