Two-factor authentication (2FA)
Two-factor authentication (2FA) is a security method that requires users to verify their identity using two different types of credentials—typically something they know (like a password) and something they have (like a phone or security token). This extra layer of protection helps prevent unauthorized access, even if a password is compromised.
When 2FA is enforced, an access token is requested when the user either:
Logs in from a new device, browser, or IP address.
Last logged in over 30 days ago.
Before you begin
Two-factor authentication is available to teams using Celonis ID. This means that it is not available in teams where single sign-on (SSO) is active. If you're logging into the platform using SSO, the options available for your personal profile may differ from the screenshots in this topic.
To learn more about Celonis ID: Celonis ID.
And to read more about SSO: Signing in.
Updating your two-factor authentication method
If you're a member of a team that's using Celonis ID, you can update your two-factor authentication method from your user profile.
You can choose between:
Email
Authenticator app
To access your user profile and update your two-factor authentication method:
Click your avatar and select Edit Profile:
Click Edit Personal Details.
Click Two-factor authentication.
Choose your preferred authentication channel:
Email: Receive the one-time code to your profile email.
Authenticator app: Configure and use your preferred authenticator app to display the one-time code to use. See: Configuring your preferred authenticator app.
Optional: Generate a two-factor recovery code by clicking Regenerate recovery codes and copying the code displayed.
Recovery codes are a one-time second factor to access your account in the event you lose access to your device and cannot receive two-factor authentication codes. See: Recovery codes.
Configuring your preferred authenticator app
To use your preferred authenticator app to sign into the Celonis Platform:
Click your avatar and select Edit Profile.
Click Edit personal details.
Click Two-factor authentication.
Select Authenticator app and click Setup.
After clicking Setup, a one-time password is sent to your email address. This password is needed for the next step.
Scan the QR code with your authenticator app, then enter the generated one-time password along with your Celonis ID password and the one-time code sent to your email.
Click Submit.
The authenticator app is now synced to your Celonis ID, allowing you to use it when signing into the Celonis Platform.
Supported authenticator apps
While there are numerous authenticator apps available, we have tested and can verify the following:
Google Authenticator
Microsoft Authenticator