Multi-factor authentication (MFA) enhances the security of your Tomorro account by requiring an additional verification step when logging in, in addition to your password.
It is based on two elements:
Something you know: your password
Something you have: a temporary code received by email or generated by an authentication app
With MFA:
Account access remains protected even if the password is compromised
Projects and contractual data are better secured
Internal security and IT requirements are easier to meet
Enable MFA
Enable the feature at the organization level
Multi-factor authentication is available behind a feature flag.
To enable it:
Contact a Tomorro administrator
Request activation of MFA for your organization
Once the feature flag is enabled, each user can manage MFA individually from their own account.
Enable MFA on your account
Go to Settings
Open the My account section
Click Two-factor authentication
Enable Two-factor authentication (2FA)
MFA activation is personal and applies to each individual user account.
Configure the authentication method
Once MFA is enabled, choose the verification method to use when logging in:
Authenticate via app (recommended)
Select Via app
Scan the QR code using an authentication app
(e.g. Google Authenticator, Microsoft Authenticator)Enter the code generated by the app
Click Validate code to confirm
Authenticate via email
Select Via email
Receive a verification code by email
Enter the code to confirm the login
Log in with MFA enabled
When MFA is enabled, it is required at every login, even multiple times within the same day.
The login process includes:
Entering your email address and password
Entering the MFA code received:
by email
or via the authentication app
Once the code is validated, access to Tomorro is granted.
MFA can be enabled or disabled at any time by each user from Settings > Account information.
