DocsICP FilingConsole
官方文档
首页

Bind or unbind MFA devices

更新时间：
复制 MD 格式
我的收藏

This topic describes how to bind or unbind multi-factor authentication (MFA) devices as CloudSSO users.

Prerequisites

MFA is enabled. For more information, see Enable MFA for all CloudSSO users and Enable MFA for a single CloudSSO user.

Bind the first MFA device

If MFA is enabled and a CloudSSO user logs on to the CloudSSO user portal by using the username-password logon method, the system prompts the user to bind an MFA device.

  1. Download an app that supports MFA devices to a mobile device, such as a mobile phone. For example, you can download Alibaba Cloud or Google Authenticator.

    In this example, the Alibaba Cloud app is downloaded to an Android mobile phone.

  2. Log on to the CloudSSO user portal by using the username and password of the CloudSSO user.

  3. On the mobile device, bind an MFA device.

    1. Log on to the Alibaba Cloud app.

    2. In the upper-right corner, tap the + icon and then the mfaicon.

    3. Tap the + icon and select a method to bind an MFA device.

      • Scan QR Code to Add (Recommended): On your mobile device, tap Scan QR Code to Add, scan the QR code on the CloudSSO user portal page, and then tap OK.

        Note

        You need to click View QR code on the user portal page to display the QR code.

      • Manual addition: On your mobile device, tap Manual, enter the username and secret key displayed on the CloudSSO user portal page, and then tap OK.

        Note

        On the user portal page, click Show Secret Key to display the secret key.

  4. On the user portal, enter the name of the MFA device.

    You can customize the MFA device name, or click Use Default Name to automatically enter the default MFA device name.

  5. In the CloudSSO user portal, enter the verification code generated by your authenticator app, and then click Bind.

Bind the second MFA device

If MFA is enabled, you can bind up to two MFA devices for each CloudSSO user.

  1. Log on to the CloudSSO user portal by using the username and password of the CloudSSO user.

  2. Move the pointer over your profile picture in the upper-right corner of the page and click Manage Virtual MFA Device.

  3. Click Add Device.

  4. Bind the second MFA device.

    For more information, see Bind the first MFA device.

Unbind an MFA device

Warning

If you unbind MFA devices from CloudSSO users, the MFA devices cannot be used to verify the identities of the CloudSSO users. This reduces account security.

  1. Log on to the CloudSSO user portal by using the username and password of the CloudSSO user.

  2. Move the pointer over your profile picture in the upper-right corner of the page and click Manage Virtual MFA Device.

  3. Find the MFA device that you want to delete, and in the Actions column, click Delete.

  4. In the Delete Virtual MFA Device dialog box, click OK.

References

Manage MFA

Previous：Set the initial landing pageNext：Change a password