Table of contents

Logging-in with Multi-Factor Authentication (for non-SSO users)

What’s changing?

As an additional security measure, OneAdvanced Identity requires Multi-Factor Authentication (MFA) alongside email and password authentication. After migration, users will need to provide a second form of verification, which can be done via email or using your preferred authenticator app. You can also take advantage of EasyPass to provide your users the option of logging in with biometrics registered on their personal devices. See our EasyPass guide for more information.

Logging in for the first time

If designated as the Administrator for the system, an email invitation to create a new account and password will not be automatically received. In this case, the password reset process, as described for users who miss the 2-day deadline, will need to be followed.

  1. Upon migration, users can expect to receive an email from identity@oneadvanced.com, which will contain the following information:
The link in the email expires after 2 days. If not used within this timeframe, users will need to request a password reset to complete the process. For further guidance, please refer to the following information.

  1. Upon clicking the 'Set up account' link, the following page will be displayed, where a new password (different from the current one) must be set.
  1. After saving the chosen password, options for Multi-Factor Authentication (MFA) will be presented.

 

Using an authenticator app

An MFA (Multi-Factor Authentication) authenticator app is a software application that generates a time-sensitive code to verify a user's identity, adding an extra layer of security to online accounts. Some of the top authenticator apps available include Google Authenticator, Microsoft Authenticator, and Authy, which are widely used for their ease of use and robust security features.

  1. If the authenticator app option is selected, the next page will display a unique QR code for scanning to set up authentication on the device.
  2. The verification code generated by the authenticator app can then be entered in the provided field and verified.
  3. After verification, the user will be redirected to the Performance & Talent log-in screen, where their email address can be entered.
  1. After entering the email address and clicking Next, the password can be entered, followed by the verification code generated by the authenticator app on the subsequent screen
Users can choose to remember the device for 30 days, avoiding the need to repeat additional verification during this period.
  1. Upon clicking Submit, access to Performance & Talent will be granted.

Using email to verify

  1. If the option to receive a verification code via email is selected, a code will be sent to verify the email address.
  2. The unique verification code can then be entered in the provided field and verified.
  3. A security question and answer will be required for account recovery purposes.
  1. After saving the account details, the user will be redirected to the Performance & Talent log-in screen.
  1. After entering the email address and clicking Next, the password can be entered, followed by a request for a verification code on the subsequent screen
  2. A unique verification code will be sent to the registered email address. The code must be submitted to complete the sign-in process.
Users can choose to remember the device for 30 days, avoiding the need to repeat additional verification during this period.

  1. If the account is not activated within the 2-day deadline, clicking the 'set up account' link in the email will display the following message
Simply follow the password reset process to continue
  1. Upon reaching the log-in screen, enter the registered email address and select 'Next'.
  1. Select 'Reset Password'
  1. Enter the registered email address and select 'Send'.
  1. An email with a reset link will be received, directing to a screen where a new password can be chosen and saved.
  1. The next step will be to select an authentication method, following the same process as previously described. Once the authentication preferences are set, the remaining steps can be completed as outlined earlier.

Was this article useful?

Frequently Asked Questions (for non-Federated customers)

Contact