Skip to main content
Solved

MFA - using Email only

  • Jan 12, 2022 4:27 PM UTC
  • 5 replies
  • 755 views
  • Translate All
Semi-Pro II
Forum|alt.badge.img+1

Hello Community,

I set up 2 FACTOR authentication to an Acumatica instance. The goal is to have an access code delivered by email. I found two troubles in using this feature: 

  1. Although my intention is to use on email , the instance always sends a two factor authentication message for using push request method and the user has to click on “Use another authentication method” link which leads to another prompt where the user can click on “Receive code by email”. This is confusing for the user and is an unnecessary extra step.  Really annoying if you need to do multiple sign-ins along the day.
  2. Another issue is the fact that two email are sent: one has for a Device Code and the other is for a Sign in Code. I do not understand this logic. 

Has anyone faced this issue out there? is there a workaround to eliminate those prompts and have a message confirming that an email was sent with the Sign in code to <email address>? 
It would be so much simpler and logical, in my opinion. 

Best answer by VogelCommunity

I had the same issue.  I removed the template in the ‘New Device Code Email Template’ field in System Management>Email Preferences and it only sent the ‘Two-Factor Access Code Email Template’ Two-factor Sign-in Code email then.

Does not seem like the best way to resolve the issue, but it’s the only way I got it to work accurately so far.

 

View original
EC

      5 replies

      Freshman II

      I had the same issue.  I removed the template in the ‘New Device Code Email Template’ field in System Management>Email Preferences and it only sent the ‘Two-Factor Access Code Email Template’ Two-factor Sign-in Code email then.

      Does not seem like the best way to resolve the issue, but it’s the only way I got it to work accurately so far.

       

      Translate
        Semi-Pro II
        Forum|alt.badge.img+1
        • eudescoelho29
        • Author
        • Semi-Pro II
        • Jun 15, 2022 5:09 PM UTC

        Thanks Ivogel. it is a good workaround for my case where email is the only method the customer wants to use. 

        Translate
        EC
          Freshman I

          Thanks.  I had the same issue and this is a good workaround.

          Translate
            Freshman I
            • rneal38
            • Freshman I
            • Oct 26, 2026 3:21 PM UTC

            Wondering if anyone has noticed this workaround doesn’t work in 2026 R1.  Even with the “New Device Code Email Template” value removed from the Security Preferences screen (not Email Preferences as mentioned in earlier version), the system still sends a code via email. But now it’s just a code in the body of the email. Not the actual template, although the subject line is still “Device Code.”  Is there a new workaround known?

            Thanks!

            Translate
              Glen Martin
              Acumatica Moderator
              Forum|alt.badge.img+1
              • Glen Martin
              • Acumatica Moderator
              • Oct 27, 2026 5:39 PM UTC

              Sending a device code is the default behaviour for unregistered devices: https://help-2026r1.acumatica.com/(W(2))/Help?ScreenId=ShowWiki&pageid=e612d54b-72d9-400c-b913-cdfa02220c58

              The workaround above no longer works in 26 R1, as a change was made to correct situations where the device code would not be sent.

              There is a product idea here to allow default Two-Factor Authentication methods other than device codes: https://community.acumatica.com/ideas/choose-another-than-receive-on-device-2fa-access-codes-by-default-17445?tid=17445&fid=None. Having your team upvote ideas will help with exposure. Adding details of a use case scenario, and how it is envisioned for the product to function is also useful when our team is reviewing these ideas. One suggestion is to have a QR or bar code to scan to register a device.

              If you are affected by the change noted above, please submit a support case.

              If Native 2FA is not working in your environment, other options are available through OpenID SSO that may also support 2FA (for example, Entra ID SSO, Okta):  https://help-2026r1.acumatica.com/(W(2))/Help?ScreenId=ShowWiki&pageid=ef559879-9907-4ec4-826e-13854e094114

              Translate
              If a Community member helped you, please *Like* their post. If an answer was provided to your question, please mark it as *Best Answer*. Thank you!
              Terms & ConditionsAccessibility statement
              About Acumatica ERP system
              Acumatica Cloud ERP provides the best business management solution for transforming your company to thrive in the new digital economy. Built on a future-proof platform with open architecture for rapid integrations, scalability, and ease of use, Acumatica delivers unparalleled value to small and midmarket organizations. Connected Business. Delivered.
              © 2008 — 2024  Acumatica, Inc. All rights reserved