Multi-Factor Authentication Frequently Asked Questions

[SwathiNaidu]

What is Multi-Factor Authentication (MFA)?

Multi-Factor authentication requires users to verify their identity using two or more factors — typically something they know (like a password) and something they have (like a mobile device). This ensures that even if a password is compromised, unauthorized access is still prevented.

Why is Schneider Electric enabling Multi-Factor authentication? 

Schneider Electric is implementing Multi-Factor Authentication (MFA) across its digital ecosystem for all customer-facing applications that handle confidential or sensitive data in alignment with our cybersecurity policy.

MFA supports:

• Stronger authentication controls.
• Protection against threats like phishing, keyloggers, and man-in-the-middle attacks.
• Improved user experience using secure login methods such as SMS, Authenticator apps and Guardian Authenticator.
• Reassurance that even if a device is lost or stolen, access remains protected by a second verification factor.

What are the supported MFA methods?

Supported methods include:

• SMS codes
• Authenticator apps (e.g. Google Authenticator)
• Push notifications (e.g. Guardian Authenticator)

MFA will be required when accessing services from new or untrusted devices.

How can I set up MFA as a SmartConnect user?

Following Sign Up or a subsequent login to SmartConnect, Schneider Electric identity management checks if you have MFA enabled. If you do not, you are prompted to choose your preferred MFA method:

• Auth0 Guardian Authenticator as a multi-factor authentication method, to receive a verification code on your Guardian Authenticator application on your phone.
• Google Authenticator as a multi-factor authentication method, to receive a verification code on your Authenticator application on your phone.
• SMS as a two-factor authentication method, to receive a verification code on your mobile phone.

How do I set up Auth0 Guardian Authenticator for MFA?  

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed.
3. Select Notification via Auth0 Guardian app
4. Install the Auth0 Guardian app from the App Store of your mobile phone.
   Note: If unsuccessful, click Try another method to select another authentication method.
5. Click Continue.
6. Scan the QR code using the Auth0 Guardian app from your mobile phone:
   
   
   
7. A recovery code is displayed, which will let you log in without your device. You can either copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
8. Click Continue to complete the setup.
9. Your Auth0 Guardian app is now set as your MFA authentication method.
   
   

How do I set up Google Authenticator for MFA?

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed.
3. Select Google Authenticator or similar. A QR code is displayed:
   
   
4. Use your authenticator application to scan the QR code and enter the displayed code.
5. Click Continue.
6. A recovery code is displayed, which will let you log in in the event your device is unavailable. Copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
7. Click Continue to complete the setup.
8. Your authenticator app is now set as your MFA authentication method.

How do I set up SMS MFA?

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed,
3. Select SMS and select your Country Code, then enter your valid mobile number in the phone number text box.
   
   
4. Click Continue to complete the setup. 
5. A verification code is sent to your mobile number. Enter the verification code and click Continue.
   
6. A recovery code is displayed, which will let you log in in the event your device is unavailable. Copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
7. Click Continue to complete the setup.
8. SMS is now set as your MFA authentication method.

Can I change my preferred MFA authentication method?

You can change your mobile number and/or the preferred MFA method at any time by visiting your profile and updating your preferences:

1. Log in to your Schneider Electric account with your username and password.
2. On the top right corner, click Profile. The My Profile page is displayed.
3. Click Two-Factor Authentication, then enter your password and click Confirm.
4. The Two-Factor Authentication page is displayed, and you can update your preferences or selected MFA Authenticator choice.

How do I change my MFA method if device is lost?

If you have lost access to your device, you can use a recovery code to change your MFA method:

1. Log in to your Schneider Electric account with your username and password.
2. When prompted to authenticate with your MFA method, click Try another method
3. Select Recovery code as the alternative method.
4. Enter the recovery code you saved during the initial MFA registration and click Continue.
5. Upon successful verification of your recovery code, you are prompted to save a new recovery code. Make sure to copy and securely store the new code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
6. Navigate to My Profile on the top right corner, and change your preferred MFA method as described above.
   
   

Can I disable MFA?

No, MFA is mandatory, in alignment with our cybersecurity policy. If you disable MFA through your profile settings, MFA reconfiguration will be required upon next login, to ensure compliance with security policies and help prevent unauthorized access.

Do One-Time Passwords (OTPs) expire?

Yes, OTPs typically expire within 15 minutes of being issued.

Are recovery codes single-use or revocable?

Recovery codes are generally single-use and are intended for one-time access when your primary MFA method is unavailable.

Once used, the system generates a new recovery code to be saved. If you suspect your recovery code has been compromised, revoke and regenerate the recovery code immediately from your profile settings.

[SwathiNaidu]

Multi-Factor authentication requires users to verify their identity using two or more factors — typically something they know (like a password) and something they have (like a mobile device). This ensures that even if a password is compromised, unauthorized access is still prevented.

Why is Schneider Electric enabling Multi-Factor authentication? 

Schneider Electric is implementing Multi-Factor Authentication (MFA) across its digital ecosystem for all customer-facing applications that handle confidential or sensitive data in alignment with our cybersecurity policy.

MFA supports:

• Stronger authentication controls.
• Protection against threats like phishing, keyloggers, and man-in-the-middle attacks.
• Improved user experience using secure login methods such as SMS, Authenticator apps and Guardian Authenticator.
• Reassurance that even if a device is lost or stolen, access remains protected by a second verification factor.

What are the supported MFA methods?

Supported methods include:

• SMS codes
• Authenticator apps (e.g. Google Authenticator)
• Push notifications (e.g. Guardian Authenticator)

MFA will be required when accessing services from new or untrusted devices.

How can I set up MFA as a SmartConnect user?

Following Sign Up or a subsequent login to SmartConnect, Schneider Electric identity management checks if you have MFA enabled. If you do not, you are prompted to choose your preferred MFA method:

• Auth0 Guardian Authenticator as a multi-factor authentication method, to receive a verification code on your Guardian Authenticator application on your phone.
• Google Authenticator as a multi-factor authentication method, to receive a verification code on your Authenticator application on your phone.
• SMS as a two-factor authentication method, to receive a verification code on your mobile phone.

How do I set up Auth0 Guardian Authenticator for MFA?  

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed.
3. Select Notification via Auth0 Guardian app
4. Install the Auth0 Guardian app from the App Store of your mobile phone.
   Note: If unsuccessful, click Try another method to select another authentication method.
5. Click Continue.
6. Scan the QR code using the Auth0 Guardian app from your mobile phone:
   
   
   
7. A recovery code is displayed, which will let you log in without your device. You can either copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
8. Click Continue to complete the setup.
9. Your Auth0 Guardian app is now set as your MFA authentication method.
   
   

How do I set up Google Authenticator for MFA?

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed.
3. Select Google Authenticator or similar. A QR code is displayed:
   
   
4. Use your authenticator application to scan the QR code and enter the displayed code.
5. Click Continue.
6. A recovery code is displayed, which will let you log in in the event your device is unavailable. Copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
7. Click Continue to complete the setup.
8. Your authenticator app is now set as your MFA authentication method.

How do I set up SMS MFA?

1. Log in to your Schneider Electric account with your username and password.
2. The Keep Your Account Safe page is displayed,
3. Select SMS and select your Country Code, then enter your valid mobile number in the phone number text box.
   
   
4. Click Continue to complete the setup. 
5. A verification code is sent to your mobile number. Enter the verification code and click Continue.
   
6. A recovery code is displayed, which will let you log in in the event your device is unavailable. Copy the code or take a screenshot of it. Select I have safely recorded this code to accept the terms for copying the code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
7. Click Continue to complete the setup.
8. SMS is now set as your MFA authentication method.

Can I change my preferred MFA authentication method?

You can change your mobile number and/or the preferred MFA method at any time by visiting your profile and updating your preferences:

1. Log in to your Schneider Electric account with your username and password.
2. On the top right corner, click Profile. The My Profile page is displayed.
3. Click Two-Factor Authentication, then enter your password and click Confirm.
4. The Two-Factor Authentication page is displayed, and you can update your preferences or selected MFA Authenticator choice.

How do I change my MFA method if device is lost?

If you have lost access to your device, you can use a recovery code to change your MFA method:

1. Log in to your Schneider Electric account with your username and password.
2. When prompted to authenticate with your MFA method, click Try another method
3. Select Recovery code as the alternative method.
4. Enter the recovery code you saved during the initial MFA registration and click Continue.
5. Upon successful verification of your recovery code, you are prompted to save a new recovery code. Make sure to copy and securely store the new code.
   Note: Recovery codes are critical for account recovery and should be stored securely. Never share your recovery code with anyone.
6. Navigate to My Profile on the top right corner, and change your preferred MFA method as described above.
   
   

Can I disable MFA?

No, MFA is mandatory, in alignment with our cybersecurity policy. If you disable MFA through your profile settings, MFA reconfiguration will be required upon next login, to ensure compliance with security policies and help prevent unauthorized access.

Do One-Time Passwords (OTPs) expire?

Yes, OTPs typically expire within 15 minutes of being issued.

Are recovery codes single-use or revocable?

Recovery codes are generally single-use and are intended for one-time access when your primary MFA method is unavailable.

Once used, the system generates a new recovery code to be saved. If you suspect your recovery code has been compromised, revoke and regenerate the recovery code immediately from your profile settings.