Skip to main content
Lerian Console completes the second verification step for users who already have multi-factor authentication enabled. Account enrollment and method management are available under Settings › Security and through the Identity API.

​
Before you start

You need:
  • an active user account with authenticator-app or email MFA enabled.
  • access to the selected method or an unused recovery code.

​
Complete the second verification step

After the password or SSO step succeeds, the Console opens the MFA verification page.
1

Select a method

Use the preferred method or select another enabled method.
2

Get the passcode

For an authenticator app, open the app and read the current code. At sign-in, the Console sends the email code automatically.
3

Enter the passcode

Enter the six-digit passcode and continue.

​
Use a recovery code

Select the recovery-code option when an enrolled method is unavailable. Enter one unused recovery code.
A recovery code works once. Store the remaining codes securely after sign-in.

​
Recover from a failed verification

​
Remove a method

In Settings › Security, open the MFA tab and select Remove next to the method. To remove the authenticator app, enter its current code. To remove the email method, enter the code that the Console sends by email when the dialog opens.

Multi-factor authentication

How MFA enrollment, verification, and recovery work.

Manage MFA via API

Enroll methods, select a preference, and manage recovery codes.

MFA deployment requirements

Configure Auth for MFA sign-in.