When we engage with Acumatica Support, we are asked to disable our MFA for the Acumatica Support user. Our company has been hacked via Acumatica before, and we will not disable the 2FA for users. I’m surprised that Acumatica asks us to disable it for them - surely Acumatica understands the importance of robust security, right?
Our current plan is to update the support account email to be the email of the specific person helping us, so they can get the emails with the authentication codes. Does anyone have any better ideas? Or know why the direction from Acumatica is to disable critical security?
There are other options as well, and a meeting to demonstrate the issue may be a possibility, depending on the support level. Troubleshooting without site access can be challenging, and the support agents are doing their best to ensure a speedy case resolution.
There are other options as well, and a meeting to demonstrate the issue may be a possibility, depending on the support level. Troubleshooting without site access can be challenging, and the support agents are doing their best to ensure a speedy case resolution.