Enroll for Multi-Factor Authentication (MFA) for Rhythm Console Users

Overview

Rhythm optionally supports Multi-Factor Authentication (MFA) for your console users. If this option is enabled, your console users will need to enter a time-based one-time password (TOTP) in addition to their regular email address and password to log in to the Rhythm Console.

Rhythm is compatible with authenticator apps that support time-based one-time passwords (TOTP), such as Google Authenticator, Microsoft Authenticator, 1Password, Duo Mobile, or other compatible authenticator apps . Each of your users must have your preferred TOTP app installed on their mobile device to generate the one-time use codes. The remainder of this guide will include instructions for Twilio Authy.

If you would like to enable MFA for your console users, you must first contact support@rhythmsoftware.com to enroll.

Note: If your organization elects to enable Rhythm's Multi-Factor Authentication (MFA) option, we strongly recommend communicating the process to your staff in advance of the rollout. Demonstrate the benefits of MFA to your organization and its constituents, share these instructions with your team, and set a deadline for everyone to complete the enrollment.

User Instructions

First, download and install your organization's preferred authenticator app on your mobile device from either the Apple Store or Google Play. This guide contains screenshots for Twilio Authy. The next time you log in to the Rhythm console, you will start by entering your email and password on the standard login screen:

You will then be prompted to Secure Your Account using an authenticator app:

Open the authenticator app on your mobile device and add a new account. In Twilio Authy, this is done by clicking the plus icon in the bottom left of the screen. You will be prompted to Scan QR Code as seen below. Clicking this button will open your camera which you must direct at your monitor to scan the QR code from Rhythm.

To save the new account in Twilio Authy, you will be prompted to assign it a memorable name and icon. Once you save the account, you can select it at any time in the bottom left of the screen:

With the new account selected, enter the token (numbers) from Twilio Authy in Rhythm as seen below. Next, click Continue to confirm your enrollment. You will need to enter the code before the timer in Twilio Authy expires and a new code is generated:

Finally, you will be prompted to save a backup code that will allow you to access your account if your mobile device is ever lost. Please store this code in a secure location, check the box to acknowledge, then click Continue.

You have now successfully enrolled for MFA. You will now be prompted to enter a code each time you log in to Rhythm. You will need to open your authenticator app, select the application you just created, and enter the code before the time expires and a new code is generated.

Troubleshooting MFA Access

If you have trouble accessing your Rhythm Console account after enrolling in MFA, use the guidance below.

What if I get a new phone?

If you replace your phone, you may need to set up your authenticator app again before you can continue logging in with MFA.

Before replacing or wiping your old phone, we recommend checking whether your authenticator app supports account backup or transfer. Some authenticator apps allow you to move your saved MFA accounts to a new device.

If you no longer have access to your old phone or authenticator app, contact your organization's Rhythm administrator or support@rhythmsoftware.com for assistance resetting MFA on your console user account.

What if I lost access to my authenticator app?

If you cannot access the authenticator app connected to your Rhythm Console login, you may not be able to complete the MFA step.

First, check whether you saved the backup code provided during MFA enrollment. If you have your backup code, use it to regain access to your account.

If you do not have your backup code, contact your organization's Rhythm administrator or support@rhythmsoftware.com for assistance resetting MFA on your console user account.

What if my MFA code does not work?

Authenticator app codes are time-sensitive and usually refresh every 30 seconds. If your code does not work, try the following:

• Make sure you are entering the current code before it expires.
• Wait for the app to generate a new code, then try again.
• Confirm that you are selecting the correct Rhythm account in your authenticator app.
• Check that the time and date settings on your mobile device are set automatically.

If the code still does not work, contact your organization's Rhythm administrator or support@rhythmsoftware.com for additional assistance.

What if I did not save my backup code?

The backup code is provided during MFA enrollment so you can access your account if your mobile device is lost or unavailable.

If you did not save your backup code and cannot access your authenticator app, contact your organization's Rhythm administrator or support@rhythmsoftware.com for assistance resetting MFA on your console user account.

For security reasons, Rhythm may need to verify your identity before MFA can be reset.

Note: Save your backup code in a secure location during MFA enrollment. This code may be needed if you lose access to your mobile device or authenticator app.