MFA User Guide

What is MFA and Why is it Important?

MFA (Multi-Factor Authentication) is a security mechanism that enhances the protection of your account by requiring two or more verification steps to confirm your identity. This adds an extra layer of defense beyond just a username and password, reducing the risk of unauthorized access even if your login credentials are compromised.

MFA helps safeguard your sensitive data and prevents cyberattacks such as phishing or brute-force attacks. It ensures that even if one method of authentication (e.g., your password) is compromised, an attacker would still need access to the additional factor to gain entry.

There are two main methods to receive MFA codes in our system:

1. Authentication Apps: You can use a dedicated app on your phone, such as Google Authenticator or Authy, to generate time-based one-time codes (TOTP).
2. Email: Codes can be sent to your registered email address for verification.

We highly recommend enabling MFA to ensure the highest level of security for your account.

Getting Started with MFA: For the new user

If you’re new and don’t have an account yet, here’s how to set up your MFA while registering:

Start with Registration
Visit https://identity.3shape.com/registration and complete the registration form. After submitting, you’ll receive an email to verify your account.

• Open the email and either enter the verification code provided or click the "Verify your account" link.

Set Up MFA During Registration
After verifying your email, you’ll be prompted with the "Protect your account with two-step verification" screen.

• Click the GET STARTED button to proceed. (If you’re not ready, the SKIP option is available, but we highly recommend enabling MFA for your security.)
  

Download or Use an Authenticator App
On the next page, you’ll see options to download an authenticator app:

• Links to the App Store (for iOS) and Google Play Store (for Android) are available under their respective icons.
• Already have an authenticator app? Click I HAVE AN APP to skip the download step. (You can click BACK if you’re feeling nostalgic or want to double-check your steps!)
  
  
  • Google Play Store:
    
  • App Store:
    
    
     

Add Your 3Shape Account to the App
On the "Add 3Shape Account in the app" page, you’ll see a QR code and an option to manually enter a code.

• Open your authenticator app on your phone and either scan the QR code or manually enter the code shown. Remember, the code expires in 30 seconds, so act quickly!
  
  
  
  
  
   

Accept the Terms and Conditions
After linking your account in the app, review and accept the 3Shape Terms and Conditions.

Account Activated with MFA
Voilà! Your account is now created, activated, and protected with MFA. On the "Your 3Shape Account is ready to use" page, you’ll see that Two-step verification is marked as "ON."

• Click LET’S GET STARTED to access your account.
  

Verify MFA in Personal Settings
To double-check that MFA is enabled, go to your Personal settings in your user profile. There, you’ll find confirmation that Two-step verification is active.

• For a quick overview of MFA, click the question mark icon (?) above.
  

With these steps complete, your account is secure and ready to use! 🚀

Enabling MFA for Existing Users

Enhancing your account security with MFA (Multi-Factor Authentication) is a valuable step. However, it’s important to note the following:

• For Regular Users: If you’re an existing user or perhaps skipped enabling MFA during registration, you can still activate MFA to secure your account.
• For SSO Users: MFA is not available for all SSO (Single Sign-On) accounts. This option is only applicable if your account was initially created with a password and later transitioned to use SSO. In such cases, after enabling MFA, you’ll need to use the Sign in without SSO option when logging in.

If your account meets these conditions, follow the steps below to enable MFA and enhance your security.

Enable MFA in User Settings
Go to the user settings page: https://profile.identity.3shape.com/user?section=settings.

• Click the Edit button, which will expand the settings section.
• Toggle the Two-step verification switch to the ON position.
  
• Press SAVE to confirm your changes.
  
  
   

Learn About MFA
After saving, you’ll see the "Protect your account with two-step verification" screen.

• Click GET STARTED to proceed. (The BACK button is available if you wish to cancel or review the previous step.)
  

Download or Use an Authenticator App
Next, you’ll be prompted to download an authenticator app:

• Use the links to the App Store (iOS) or Google Play Store (Android) to download a compatible app.
• If you already have an authenticator app installed, simply click I HAVE AN APP to skip this step.
  
  
  
  
  • Google Play Store:
    
  • App Store:
    

Add Your 3Shape Account to the App
Open your chosen authenticator app and add your 3Shape account by either:

• Scanning the provided QR code using your phone’s camera (remember, the code expires in 30 seconds, so act quickly!), or
• Manually entering the code displayed on the screen. 
  
  
  
  
   

Once completed, your account will be protected with MFA, ensuring an extra layer of security for your data.

 

Logging In with MFA Enabled

Once MFA is enabled, logging in requires an additional step to ensure the security of your account. Below are two scenarios based on the method of verification you choose:

Scenario 1: Logging in with an Authenticator App

1. Go to the login page: https://identity.3shape.com/account/login.
2. Enter your registered email and password, then click Log In.
3. Open your authenticator app on your phone and retrieve the one-time code for your 3Shape account.
   
4. Enter the code in the provided field on the login page.
5. Access granted! You’re now securely logged in.

Scenario 2: Logging in with Email Verification
While we strongly recommend using an authenticator app for enhanced security and convenience, email verification is available as a backup option if needed.
Here's how to log in using email verification:

1. Go to the login page: https://identity.3shape.com/account/login.
2. Enter your registered email and password, then click Log In.
3. On the MFA prompt screen, click Send code to email instead.
   
4. Check your inbox for an email containing the one-time code (valid for 10 minutes).
   
5. Enter the code in the field on the login page.
   
6. Success! You’re now logged in and ready to use your account.

If the code has expired, you'll see this message and can request a new code:

Both methods ensure a secure login experience, with options tailored to your preferences and available tools.

Logging in with MFA for an SSO User
If your SSO account was previously created with a password and MFA was later enabled, you can log in using the "Sign in without SSO" option.
Note: Direct login using both SSO and MFA simultaneously is not supported. This option is available only for accounts initially set up with a password before SSO integration.
 

Access the Login Page
Go to https://identity.3shape.com/account/login.

Select "Sign in Without SSO"

On the login page, enter your email, click the NEXT button, and then select the Sign in without SSO link.

Enter Credentials and Authenticate

• Enter your password.
• Enter the one-time code from your authenticator app or use the email-based verification option.

Resetting the Password for an Account with MFA Enabled

If you need to reset the password for an account that has MFA enabled, follow these steps:

Access the Login Page
Go to https://identity.3shape.com/account/login.

• Enter your email address and click Next.
• On the password entry page, click the Forgot your password? link below the password field.

Verify Your Email
On the "3Shape Account Recovery" page, double-check that the displayed email is correct.

• Click the Submit button to proceed.

Enter the Recovery Code
Check your email inbox for a password recovery code.

• On the "Password Recovery" page, enter the code from the email to verify your identity.

Enter the Authenticator Code
On the "Get the authenticator code from your app" page, open your authenticator app and retrieve the one-time code for your 3Shape account.

• Enter the code in the field provided.
  

Reset Your Password
After successfully entering the authenticator code, you will be prompted to set a new password for your account.

• Choose a strong password and confirm it to complete the process.
  

Your password has now been reset, and your account remains secured with MFA.

How to Reconfigure MFA if Device or Authenticator Data is Lost

If you have changed devices or accidentally deleted the MFA data from your authenticator app, follow these steps to reconfigure your MFA:

Log in to your account:
Go to identity.3shape.com/account/login and log in with your email and password.

Authenticate with email verification:
Follow the process outlined in the "Logging in with Email Verification" section to verify your identity using your email.

Access user settings:
Navigate to profile.identity.3shape.com/user?section=settings to access your user settings.

Disable MFA:

• Locate the MFA settings in your user settings.
• Click to turn off MFA.
• In the pop-up window titled "Turn off two-step verification?", confirm by clicking the Turn Off button.
  

Re-enable MFA:

• After disabling MFA, re-enable it by following the on-screen instructions.
• Generate a new QR code.
• Save the QR code in your authenticator app for future use.

By completing these steps, your MFA will be reconfigured and ready for secure access to your account.