Ivanti Neurons Multi-Factor Authentication (MFA)

Ivanti Neurons Multi-Factor Authentication (MFA) allows you to enhance the security of your Ivanti Neurons Platform if you are not able to leverage an external authentication provider. This method requires all members with Ivanti Neurons Platform accounts to authenticate via a mobile device authenticator app when signing in.

Each member will need to complete a one time setup process to enable authentication, and then they can authenticate each time they sign in to Ivanti Neurons.

Ivanti Neurons Multi-factor Authentication (MFA) Setup

The steps to enable Ivanti Neurons Multi-Factor Authentication :

  1. Once signed in to Ivanti Neurons, on the Authentication page, select Configure & Enable in the Ivanti Neurons Multi-Factor Authentication (MFA) section.
  2. On the Ivanti Neurons Multi-Factor Authentication (MFA) page, select the check-box Configure Ivanti Neurons Multi-Factor Authentication (MFA) for this tenant and click Continue to display the Enable Ivanti Neurons Multi-Factor Authentication page.
  3. Read through the instructions on the Enable page and if you are happy to continue click Setup & Enable to begin the setup process.
    If the setup process is not completed for any reason, you will still be able to login to Ivanti Neurons using the username and password authentication.
  4. The next page displays the three steps which must be followed to get Ivanti Neurons Multi-Factor Authentication (MFA) setup:
    1. On a mobile device, select and download an authenticator app from the App Store. We recommend using an app such as Microsoft Authenticator or Google Authenticator.
    2. Scan the QR code displayed, or manually enter the key, to verify the app with the Ivanti Neurons Platform.
    3. Once the QR code has been scanned, or the key entered, the authenticator app displays a unique code, enter the 6-digit verification code and click Verify and Continue.

  5. A list of ten single-use recovery keys display on the next page. You must copy and keep a safe record of these keys so that one can be used to gain access if you do not have access to the authenticator app. Confirm you have backed up the recovery keys and click Finish and Enable.

    If the admin has not made a record of these keys, and one is required, you will need to contact Ivanti Technical Support.

Ivanti Neurons Multi-Factor Authentication (MFA) is now enabled for all members across the tenant. If, at any point, you want to change authentication method and authenticate via a supported external authenticator, such as Entra ID, you must first Disable Ivanti Neurons Multi-Factor Authentication (MFA).

Ivanti Neurons Multi-Factor Authentication (MFA) Sign In

Once Ivanti Neurons Multi-Factor Authentication has been configured and enabled you will only need your username and password and the 6-digit verification code from the authenticator app to login to the Ivanti Neurons Platform. You also have the option to remember the device for for 30 days, so a verification code will only be required every 30 days to authenticate log in.

If for any reason you do not have access to the authenticator app you can select to sign in using a recovery key from the keys backed up during the setup process.

If all of the recovery keys have been used, or there is no record of them, the admin will need to delete and re-invite the member, and the enrollment process will need to be completed again to create a new set of recovery keys.

Disable Ivanti Neurons Multi-Factor Authentication (MFA)

If you have Ivanti Neurons Multi-Factor Authentication (MFA) enabled but want to start using a supported external authenticator you must first disable MFA.

Disabling Ivanti Neurons Multi-Factor Authentication (MFA) will delete all recovery keys and authenticator app data. Members will revert to username and password authentication only.

You can renable Ivanti Neurons Multi-Factor Authentication at any time by following the configure and enable process again, at which point all members will need to enrol again.

It is not possible to disable Ivanti Neurons Multi-Factor Authentication for certain members, the configuration impacts all members for the tenant.

  1. Go to Setup > Authentication.
  2. In the Ivanti Neurons Multi-Factor Authentication (MFA) section, click Actions and select Disable authentication method.
  3. If you are happy to continue with deactivating Ivanti Neurons Multi-Factor Authentication, click Disable Authentication Method to complete the deletion of the advanced authentication method for this tenant.

Reset Ivanti Neurons Multi-Factor Authentication (MFA)

If you lose your device, or access to your authenticator app, you will need to reset Ivanti Neurons Multi-Factor Authentication (MFA). This can be done by the user, or the tenant administrator.

User Reset

To reset multi-factor authentication (MFA) for your account and register a new device in your user settings, do the following:

  1. Go to the global toolbar and click on your profile icon to display the menu options.
  2. Select Reset Multi-Factor Authentication.
  3. A confirmation message displays, click Reset MFA. The connection between your account and authenticator device is deleted, and you are automatically signed out.
  4. Sign in using your username and password. Complete the MFA process from the start to register a new device.

Admin Reset

To reset multi-factor authentication (MFA) for a user, do the following:

  1. Go to Admin > Access Control.
  2. On the Members tab, select the more menu options ellipsis icon for the required user.
  3. From the menu options select Reset MFA.
  4. A confirmation message displays, click Reset MFA. The connection between the user account and device is deleted.
  5. The user must sign in using their username and password, and complete the MFA process from the start to register a new device.

Related topics

Ivanti Neurons Authentication

External Authentication (SSO)