Contents
Purpose
MFA
Types of Authentication
Ordering Physical Tokens
Using Duo
Purpose
This document is to provide an overview of the SedonaOffice user login process for hosted customers, which includes the use of Duo Multifactor Authentication (MFA)
Not all users will need to use MFA, only the users that will access SedonaOffice directly, vs those using only SedonaX or SalesAutomation. The chart below shows the different paths a user can take to access SedonaOffice in a hosted environment.
During the initial project planning, the PM will provide the customer with a spreadsheet to identify the different types of users for the customer implementation and to help guide the conversation on preparing for user setup. During the setup of the server, the PM will provide the user listing to the Infrastructure team to setup Duo enrollment for the users.
Return to Contents
MFA
For hosted customers, Multifactor Authentication (MFA) is required for users attempting to access the SedonaOffice hosted site. Duo is the third-party provider required for MFA with SedonaOffice.
Return to Contents
Types of Authentication
There are three options for the customer to choose from for Duo MFA:
- Mobile App –Downloaded to an updated smartphone or tablet that has network connectivity
- Free application download
- Physical Token – Tokens are physical devices that generate a code for the user logging into the server
- We charge the cost of the device and include standard shipping
- For more information: https://guide.duo.com/tokens
- Phone Call – Call made to the phone line of choice
- Confirm with the carrier any rates charged
- For more information: https://guide.duo.com/other-phones
Ordering Physical Tokens
The discussion on user access should occur during the sales cycle as part of the discovery of how the users will access the system. The Sales Representative should have included the purchase of physical tokens if required and included in the SOW information.
If during the lifespan of the project, a need for physical tokens is discovered, submit a quote request to the Sales Representative for the quantity required and location to ship them. This will generate an invoice to the customer which requires payment before the tokens are ordered/shipped.
Note: Currently there is no SKU for Duo tokens - a manual invoice may need to be created by AR.
Once the invoice to the customer is paid, create a case for Infrastructure to determine if there are tokens is stock to ship or if tokens must be ordered. Upon shipment, the tracking information and serial number of the token will be supplied to the PM via the case.
Upon receipt, the customer representative or end user of the token will need to log a case to have the token activated.
Return to Contents
Using Duo
When the user logs into the hosted site, the following screen will appear:
The user will select the method to authenticate:
- Duo Push – to mobile phone
- Call Me – places a call to the phone number provided in set up
- Passcode – code received on the physical token
