Two-Factor Authentication Methods Offered by Flowroute

• Email (least secure)
• Yubikey (requires Yubikey device)
• TOTP (Time-based One-Time Password)

Two-Factor Authentication Guide

1. Log into Flowroute.
2. Navigate to Manage Portal > Preferences > User Profile.
3. Under Two-Factor Authentication (2FA), click the Enable button to enable 2FA on the user account.
    
4. Confirm that Flowroute is authorized to create a second layer of security on the account.
    
5. Select the preferred method for 2FA and proceed with the applicate method walkthrough below.

Email Method Walkthrough

When the Email method is enabled on an account, Flowroute will send a separate 6-digit authentication code to the account's registered email address. 

The 6-digit code can be used in a 10-minute window. If the code is not used within this window, another code can be sent from the Two-Step Authentication verification screen. Requests cannot send more than once per minute. 

1. After enabling 2FA on the user account, select Email as the type of method.
2. Click the Next button.
   
3. An email will be sent to the account's registered email address.
4. Click the link in the email to confirm. Two-Factor Authentication has now been enabled with Email selected as the method.

Yubikey Method Walkthrough

1. After enabling 2FA on the user account, Select Yubikey as the type of method.
    
2. Click the Next button.
3. Enter a token from the Yubikey. The token will be generated by touching the Yubikey. 
   
4. Click the Next button. Two-Factor Authentication has now been enabled with Yubikey selected as the method.

Yubikey Backup Tokens

Yubikey Backup Tokens should also be generated in case the Yubikey is ever lost or unable to be accessed again.

1. To generate the Yubikey Backup Tokens, navigate back to the 2FA option in Flowroute. 
2. Click the link for Backup Tokens.
    
3. Click the Generate Tokens button. Save the generated tokens in a secure location to further protect the account.

App Verification Code (TOTP) Method Walkthrough

TOTP 2FA options are created using a third-party application to create timed codes that are unique to each account authorization key. Some examples of the application that are available to use with Flowroute are Google Authenticator or 2FAS Auth.

1. After enabling 2FA on the user account, select App Verification Code (TOTP) as the type of method.
    
2. Click the Next button. A QR Code will be presented. 
3. Scan the QR Code with the preferred Authenticator application on the user's smartphone.
    
4. Once the QR Code is scanned through the authenticator application, it will be added to the application.
5. Enter the timed code provided into the Token field.
6. Click the Next button. Two-Factor Authentication has now been enabled with App Verification Code (TOTP) selected as the method.