Kandji enforces Multifactor Authentication (MFA) for all users who sign into a Kandji tenant using an email and password combination. This MFA requirement does not affect users who authenticate via Google, Office 365, or an SSO Connection.
Register an MFA Application
Learn how to register an MFA Time-based One-Time Password (TOTP) application to your account. Currently, you may only register one TOTP application per user account.
Navigate to your Kandji tenant, and click Log In.
Login using your Email address & Password.
After authenticating, you will see a prompt to scan the registration QR code using a password app that supports TOTP. Any TOTP application will work, such as Apple Passwords (built-in for iOS and iPadOS), Google Authenticator, and many others. Scan the barcode and complete the setup within your TOTP application.
Enter the TOTP code shown in your application.
Click Continue.
Copy your Recovery Code.After configuring your TOTP application, you will be given a recovery code to regain access to your account in the event that you lose access to it. If you lose access to your TOTP application and recovery code, please contact Kandji Support.
Click the "I have safely recorded this code" checkbox.
Click Continue.
MFA Registration is now complete. The next time you sign into Kandji, you will see an MFA prompt similar to the following:
Manage your MFA Applications
Learn how to delete and manage your registered MFA application. If you authenticate via Google, Office 365, or an SSO Connection, the Multi-Factor Authentication section will not be available. You will need to log out, and log in using the email address and password fields.
Log in to your Kandji tenant, and click your name in the lower-left corner.
Click My Profile.
Click the Multi-Factor Authentication tab.
Click on the ellipsis.
Click Delete. Upon your next login, you will be required to register a new one.
Learn more about using Multi-Factor Authentication for signing in with G Suite and Office 365 below: