Turn on two-factor authentication with an app

Every password sign-in to Orizon already asks for a second factor: by default it is a 6-digit code sent by email (Email Verification). With an authenticator app the code comes from your phone and no longer depends on your mailbox.

Goal

Turn on the Authenticator App as the second factor for your Orizon account.

Prerequisites

• An Orizon account you sign in to with a password. If you sign in with Google or Microsoft, the second-factor setup section is not shown: verification is handled by your provider.
• A smartphone with an authenticator app, such as Google Authenticator, Authy or Microsoft Authenticator.

Steps

1. Open your security status

   In Orizon SSO, open your Profile and find Security Status. If it reads Only email verification is enabled, the app is not active yet.

2. Start the setup

   The Two-Factor Authentication section lists two methods: Email Verification, already enabled, and Authenticator App, marked Recommended. Click Set Up Authenticator App.

3. Scan the QR code

   Open the authenticator app on your phone and scan the QR code. The app adds an "Orizon SSO" entry with your email address, showing a 6-digit code that changes every 30 seconds.

4. Verify and enable

   Type the 6 digits into the Enter verification code field and click Verify and Enable.

Result

The message Two-factor authentication enabled appears and the Authenticator App card shows Enabled. From now on, every password sign-in asks for the app code instead of the email code. Passkey sign-ins do not ask for any code.

Troubleshooting

• The code is rejected: make sure your phone sets its time automatically, and type the current code before it changes.
• Failed to set up 2FA: reload your profile and click Set Up Authenticator App again.
• You want to move the app to another phone: click Generate new QR code, scan it with the new phone and finish the verification straight away. The new QR code replaces the previous key: the old phone stops working and, until you finish the verification, sign-in goes back to asking for the email code.
• You lost your phone: there are no backup codes and the profile has no option to turn the app off. Contact Orizon support: a platform administrator can reset two-factor authentication. After the reset you are back on email verification.

Related articles