How-to enable multi-factor authentication in ESR

Views:

Introduction Steps to Follow FAQ Support

Introduction

To ensure that ESR security is consistent with National Cyber Security Centre (NCSC) guidelines, https://www.ncsc.gov.uk/guidance/multi-factor-authentication-online-services, multi-factor authentication (MFA) is now available for ESR internet access.

MFA gives all ESR users the option to use extra security when logging in to their ESR account.

NOTE: Users can continue to log in using their username and password and managers and core users
can continue to use the step up functionality. It should be noted that that MFA is optional for
all users.

NOTE: Once MFA is enabled, it is not possible to revert to the previous method.

Prerequisites
Before registering to use MFA, users must have Internet access for ESR approved and have an authentication app installed in their personal device. Microsoft Authenticator is the supported authentication method and users must download and install Microsoft Authenticator on their mobile device from either Google Play or the iOS App Store

Steps to Follow

Users can register to use MFA by logging in to ESR on HSCN (at work).

Step 1: The registration screen can be accessed via the ESR Portal > Manage Internet Access button as shown below.

Step 2: This will open the Manage Internet access page, with the MFA registration form.

Step 3: Users can then follow the instructions on screen to link their account to the Authenticator app.

Following successful registration, the following screen will be displayed:

Step 4: Once enabled users will now be able to use MFA when accessing their ESR account/s via the internet.

Following log in with a username and password, the following form will be displayed:

Users must now open the MS Authenticator app on their phone and type in the 6 digit code supplied. Once entered, the user will click on the Confirm Code button and will be redirected to the ESR Portal.

Step 5: Remember Device.

There is an option to ‘Remember Device’. If selected, a code will not need to be entered for another 60 days to access the My ESR Dashboard.

A code will still be required if they need to use the Manager Dashboard or use ESR BI.

For a subsequent login, users will enter username and password and then click the Upgrade Access button on the top right of the screen.

You will then be asked to enter a code from the authenticator app as shown above.

Frequently Asked Questions

What if I cannot scan the QR code?

If you cannot scan the QR code you can click on the show key button and enter a key on the app instead.

What if I enter the wrong code too many times?

If the wrong code is entered more than 5 times, then the user must wait one minute before attempting to enter again.

How many devices can I use?

A user can access ESR on the Internet on multiple devices, however, only one mobile device can be set up as the authentication source at a time. It is recommended that the device used is a personal device.

Registering a new device, will require the user to log in on HSCN (at work) and use the Reregister device option available on the Manage Internet Access form as shown below:

Registering a new device will automatically invalidate any previous device that was registered against their account.

Why am I being asked to put the authenticator code in again?

Users will need to enter a code if their session times out.

Need Further Help?

If you need any further assistance, please contact Support Team at support@example.com.

Or why not check out our other guides on this topic here?

Keywords: multi factor authentication, esr, microsoft authenticator, multi factor authentication in esr, ios, android