Advanced Single Sign-on (Advanced SSO) is a user authentication method that makes it easy to centrally manage application access and allows you to securely authenticate with multiple applications by using just one set of credentials.
Multi-factor authentication (MFA) is a multi-step process to enable users to access their software applications. It requires you to enter more than just a password. Applying MFA and the need for a second form of authentication increases security and can help prevent unauthorised account access, especially in the situation that a system password has been compromised. You will most likely have experience of MFA in your personal life when accessing online banking, transacting online or accessing other apps.
The adoption of MFA is common in software applications and is encouraged as best practice by cyber security experts. The UK Government treats it as a standard software tool in its Cyber Essentials Scheme.
You can read more about SSO, MFA and why it's important in our short explainer.
Authenticator App
You can choose to use any authenticator app but you should check with your organisation as they might have a preferred one so check with them first.
Passwords in the cloud are encrypted and decrypted only when they reach your device.
Android, iOS
Yes
Yes
+ Connects to your Microsoft account
+ Includes a lot of extras, including password management, verified IDs, addresses and payment card information
+ Backs up in the cloud if you turn on account recovery
Authentication Providers
The following can only be done through Admin Applications - please speak to your OneAdvanced representative to have this change carried out on your system.
You will need to switch over your authentication provider in your Care Cloud environment in the following way.
Navigate to Setting > Security > Authentication Providers.
The 'Authentication Providers' page is displayed:
Select the Advanced SSO record.
The following page is displayed:
The Default should be set to Yes.
Logging in for the first time with Advanced SSO and MFA
If you're logging in to an Advanced application for the first time, or if your account has been migrated to use Advanced SSO, you will get these steps on your first login.
If you have logged in using Advanced SSO before but are setting up MFA for the first time, you will not need to set a password as you will already have a password for your account. You can skip ahead to Setting up MFA. This is relevant for existing users of Advanced HR or Advanced Financials.
Setting your password
When first logging on, you will be asked to enter your email address.
If you have access to more than one organisation, you will see this screen to select an organisation. If you only have one organisation, you will not see this screen and will skip straight to screen 3.
Select 'Forgot password?' under the log in button in order to set a password for your account.
You will need to enter your username or email address.
An email will be sent to your email address with a link to set your password.You will receive an email that looks like this, but will include your organisation's name.
Click on 'Change password' in the email, and you will be brought back to the Advanced SSO login process. On the update password screen, you will need to enter a new password.When you have set a new password, you will receive a confirmation email.If you receive this email and you haven't set a new password, make sure to contact your system administrator.
Setting up MFA
Once you have set your password, you will be asked to set up Multi-Factor Authentication (MFA) using an authenticator app on your phone. We show the Microsoft Authenticator app here but you can use any authenticator app, including Twilio Authy and Google Authenticator. Your organisation might have a preferred app for you to use. You can find these by searching 'authenticator' in your phone's app store. Follow the instructions on the screen to configure your MFA app. You will need to be able to scan the QR code.
If you cannot scan the QR code, you can select 'Unable to scan?'. You will be taken to a manual setup screen with the details to enter into the authenticator app.For the Microsoft Authenticator app shown here, you choose the Account name (you could use Advanced for example) and the Secret key is the 32 character code given on the login screen.
Once you have set up the app, you will be asked for a verification code.
Once you have entered the verification code correctly, you will be logged into the software.
Subsequent logins
When you login in the future, you will only have two steps.
You will be asked for your username or email address and password.
You will be asked to enter a verification code from the authenticator app you set up.
That's it! If you're unsure of anything or have any problems logging in, contact your system administrator or the support desk for help.
