Multi-Factor authentication in Streamline

This guide walks administrators and users through enabling Multi-Factor Authentication (MFA) in Streamline. It explains how to choose an authentication method, set up an authenticator app, and configure backup options to strengthen account security. Following these steps helps ensure only authorized users can access your organization’s Streamline account.

What is Multi-Factor Authentication

Multi-Factor Authentication (MFA), also known as Two-Factor Authentication (2FA), adds an extra layer of protection to your Streamline account by requiring two components to log in:

1. Your account password
2. An authentication code sent to your mobile device or email

Note: Multi-Factor Authentication makes it significantly harder for anyone to access your account without your permission.

How Multi-Factor Authentication Works

Streamline enforces Multi-Factor Authentication (MFA) for all users by default. Each time you sign in, you’ll receive or generate an authentication code to complete verification.

Depending on your chosen method, the code will either:

• Be generated by an authentication app (such as Duo or Authy), or
• Be sent via email

To access your account, you’ll need both your Streamline password and the authentication code.

Adaptive MFA

Streamline uses adaptive authentication to intelligently determine when to prompt for a second authentication factor. The system continuously monitors login signals to balance security with user convenience.

When you log in, the system evaluates multiple factors including:

• Trusted device recognition - whether you're logging in from a device you've used before
• Location data - whether you're logging in from your typical geographic location
• Unusual login patterns - changes in login behavior or timing that may indicate risk

When you log in from your regular device and location with normal patterns, you likely won't be prompted for MFA. However, if the system detects something unusual (like a new device, different location, or suspicious activity), it will require MFA verification for added security.

Choosing Your Authentication Method

Streamline enforces a minimum level of Multi-Factor Authentication (MFA) via email for all users but recommends using an authentication app for stronger, more reliable protection.

Authentication apps generate time-based, one-time codes that aren’t transmitted over email or SMS, reducing the risk of phishing or interception.

The only way to bypass MFA in Streamline is through Single Sign-On (SSO). If your organization uses SSO, we recommend enabling MFA directly within your SSO provider to maintain consistent protection across all login methods.

As an admin, you can choose how MFA is enforced for your organization. You can decide whether:

• Users authenticate via email each time they log in, or
• Users are required to use an authentication app, which offers stronger security 

To adjust this setting:

1. Click Settings in the bottom left corner & select Security.
2. Open Multi-Factor Authentication & choose your preferred enforcement method.
   
    
3. After selecting MFA enforcement via authenticator app, all users will be prompted to set up MFA via authenticator app on their next login.

Choosing an Authenticator App

If your organization requires an authentication app, you can use any app of your choosing including the following:

• Google Authenticator (Android, iPhone, BlackBerry)
• Duo Mobile (Android, iPhone)
• Authy (iOS, Android, Mac, Windows, Linux)
• Amazon AWS MFA (Android)

After installing your preferred app:

1. In Streamline, click your Profile in the bottom left corner.
2. Select Edit Profile → Security Settings & choose edit Two-factor Authentication.
3. A QR code will appear on the screen.
4. Scan the QR code using your authentication app.
5. Enter the code generated by your app into Streamline.
6. Click Verify Code.

Once the code is successfully verified, MFA setup is complete.

Best Practices

• Use an authentication app rather than email for stronger security.
• For organizations using SSO, enable MFA within your SSO provider for consistent enforcement.

Troubleshooting

If users encounter issues logging in with MFA:

• Confirm their selected authentication method (email or app).
• If using an app, check that the device’s time settings are set to automatic (incorrect time can cause invalid codes).

For further help, contact your Streamline admin or Support with details about the authentication method and any error messages received.

Once MFA is set up, users can enjoy enhanced security and protection against unauthorized access.

Admins can adjust or monitor MFA enforcement settings at any time under Settings → Security → Multi-Factor Authentication.