Reset MFA for customers: A safe access recovery approach in Site24x7 MSP
Multi-factor authentication (MFA) adds an extra layer of security for Site24x7 MSP accounts, but losing access to the registered MFA device can temporarily block a customer from logging in. To address this, Site24x7 MSP provides a secure process for resetting MFA. This guide outlines a real-world use case and step-by-step instructions for MSP admins to help customers regain access to their accounts safely while maintaining security and business continuity.
How bypassing MFA helps
By allowing the customer to temporarily bypass MFA through MSP admin approval, Site24x7 MSP ensures a secure and seamless recovery process. Customers regain access quickly, reset their MFA settings independently, and resume monitoring activities without disruption. This controlled and efficient workflow balances strong security with operational continuity, making MFA recovery both safe and straightforward.
Real-world use case
Scenario
A Site24x7 MSP admin manages multiple customer accounts. A customer loses their mobile device, which was configured for MFA in their Site24x7 MSP account. Since MFA is enabled for their account, the customer cannot log in with just their username and password.
Problem
Without access to their MFA device, the customer cannot authenticate and access their Site24x7 account. This results in delays in monitoring activities, troubleshooting tasks, and other critical operations.
Solution
The MSP admin can grant permission to disable MFA specifically for the affected customer. This ensures:
- Maintained security: MFA is not turned off globally; permission is restricted to this customer only.
- Customer autonomy: The customer can log in and configure MFA on a new device without needing to share their password or rely on MSP admins to reset the account.
- Business continuity: The customer quickly regains access, ensuring monitoring and incident response remain uninterrupted.
Steps to reset MFA
Step 1: Grant MFA permission to the customer
This step is intended for MSP admins who have the privilege to grant MFA permissions to their customers.
- Log in to the Site24x7 MSP account.
- Navigate to Admin > Customers.
- Select the customer who needs their MFA permission reset and click the hamburger icon
next to their name.
- Choose Disable Multi-Factor Authentication. This action allows the customer to disable MFA for their account temporarily.
Step 2: Disable or reset MFA
This step is for MSP customers who have been given permission to disable or reset MFA on their devices.
- Log in to the Site24x7 MSP customer portal.
- Click the profile image in the top-right corner and select My Account.
Note: The My Account option will be visible only if the MSP admin has disabled MFA for the customer. When MFA is enabled for the first time, My Account will not appear, but it will become visible once MFA is disabled. - Click Enable Multi-Factor Authentication on the My Account page and you will be redirected to the Zoho Accounts page. Learn more about MFA for customer accounts.
- Disable MFA using the toggle button beside MFA Modes. Under MFA Modes in the Multi-Factor Authentication page, click Set up Now and follow the steps provided to add a new device.
Under MFA Recovery Options, click Generate New Codes to create new recovery codes. You can download and save the codes for future use.
Step 3: Set up MFA on a new device
Follow the steps to add MFA on your new device here: Configuring MFA.
Related Articles
How is MSP customer data isolated from other customer accounts?
Site24x7's Managed Service Provider (MSP) module offers a hosted monitoring solution for MSPs' customer services, which allows the MSPs to benefit from a managed monitoring service through a unified MSP console. MSP customer data is securely isolated ...Enhancing customer account security with multi-factor authentication for MSPs
MSPs can enhance the security of their customers' accounts by enabling multi-factor authentication (MFA), which generates time-sensitive one-time passwords (OTPs) that refresh every 30 seconds. This provides an additional layer of protection against ...Associating End-Customers with your MSP Customer Account
You can associate all your end-customers with your MSP Customer account by assigning unique roles and privileges to them. There are seven different User Roles that you can assign to an end-customer: White labeled Client Portal (Read Only): Enable ...How can my MSP end customer access the rebranded customer portal?
Setting up rebranded customer portal The customer portal can be set up during the customer account creation process. Learn more about creating a custom login URL. Inviting/Providing access to your end customers: To provide access for your ...MSP customer portal access via a custom rebranded URL and CNAME mapping
Although you use Site24x7 for providing managed monitoring services to your customers, you might want to bring in some branding to boost your business reputation. With the custom URL option in MSP Account, your customers can easily view their monitor ...