Multi-Factor Authentication (MFA)

An additional layer of security is included in Mitchell Cloud products. When you log in to Mitchell Connect, you may be asked to complete additional steps to confirm your identity.

Note: To ensure a smooth transition, this feature may be released at different times for some regions and insurance company partners. Client Service Managers will enter a request to enable MFA for an insurance company.

How to

  1. Log in to Mitchell Connect. An email with a one-time passcode is automatically sent to the email address you used when you registered.

  2. On the Authentication page, enter the passcode in the Authentication Passcode field.

  3. Click Submit.

  4. Click Continue to Mitchell Product.

Note: If you change the device, browser, or location when you access Mitchell Connect, you may be asked to complete the authentication. If you change your location frequently like a Staff Appraiser, you can be configured as an Ambulatory User to bypass MFA. Client Service Managers can assign users as Ambulatory Users.

Reference

Is MFA automatically enabled?

No. MFA will not automatically be enabled. While Enterprise Login will be the default for Mitchell Connect users, MFA will have to be enabled by the Client Service Manager.

Is MFA applied only to the user?

No. MFA will be applied at the organization level and each user in that organization will have MFA.

What is an Ambulatory User?

If your duties frequently take you in to the field and from location to location, you can be configured as an Ambulatory User. Reach out to the Client Service Manager to enable the ambulatory attribute.

How long will I be able to use my existing passcode?

30 days for a standard user; 7 days for an ambulatory enabled user.

I use 2 computers, will I have to re-authenticate every time I switch between them?

No. Each device used for an MFA enabled account gets its own unique fingerprint. Once you authenticate your account on a device, you will not be asked to re-authenticate unless you change locations, change something on your device (operating system, browser, etc.) or the authentication time period expires for that user type (standard versus ambulatory).

I use Single Sign On (SSO) for Mitchell Connect. Will I have to authenticate?

No. This does not apply to users who SSO with Mitchell Connect.