Multifactor Authentication (MFA) provides an additional layer of security by verifying an administrator's identity using a combination of two authentication steps. To ensure the highest level of security across centralized management environments and protect against single points of failure, MFA is mandated for all commercial Managed Service Provider (MSP) accounts accessing the Managed Services Center (MSC).
At every login, administrators across your organization must enter a One Time Password (OTP) in addition to their standard login password.
Notes:
Administrative Access: Only an MSP Admin can configure organization-wide MFA settings or reset MFA for other administrators. Tenant Admins and Read-only Admins do not have access to these capabilities.
Evaluation (Eval) Accounts: Evaluation MSP accounts have the option to disable MFA post-login. However, once an Eval MSP is converted to a commercial account, MFA becomes strictly mandated upon the next login, and the administrator will be prompted to configure it immediately.
Supported Multifactor Authentication Methods
The MSC supports the following modern MFA methods:
Method | Description |
Authenticator App (TOTP) | The OTP is generated by the administrator's linked Authenticator app.
The following Authenticator Apps are certified by Druva:
|
SMS | The OTP is sent to the administrator's registered mobile number. |
First-Time Login and Mandated Configuration
Upon your first login, you will be guided through a mandatory configuration process. You will not be able to access the MSC until this step is complete. During this process, you will be required to set up a new password that meets the new Strong Password Policy requirements.
Switch Between Authenticator App and SMS
MSP Admins can seamlessly switch their authentication mechanism between an Authenticator App and SMS.
Note: This action updates the required authentication method for the entire organization, not just your personal account.
From the MSC console, click the settings gear icon in the top right corner and navigate to Access Settings.
Under the Multifactor Authentication section, click Change.
Select an authentication method.
Authenticator App-based Authentication configuration steps:
Scan the displayed QR code using your authenticator app, then enter the 6-digit code it generates to verify the setup.
Upon successful verification, your authentication method will be updated. For all subsequent logins, administrators will be required to authenticate using the OTP generated by their linked app.
b. SMS-based Authentication configuration steps:
Turn on Multi-Factor Authentication (MFA) and select the option to receive your One-Time Password (OTP) via SMS.
Enter and register your mobile phone number to receive verification OTPs via SMS.
SMS-based MFA is now successfully configured and enabled across your organization.
Once authenticated, the authentication method will be updated for your organization, and all administrators will be notified by email.
Reset Multifactor Authentication
If an administrator changes their mobile device, uninstalls their authenticator app, or loses access to their phone, an MSP Admin can reset their MFA configuration from the MSC.
From the MSC dashboard, navigate to the administrator management section.
Locate and click on the specific administrator whose authentication needs to be reset.
Select the option to Reset MFA for that user.
4. In the confirmation dialog, click Continue.
Authenticator App reset: On your next login, reconfigure the app with your Druva account by scanning the displayed QR code.
SMS reset: On your next login, register your mobile number with your Druva account.
What happens after a reset?
During their very next login attempt, the affected Admin will be treated as a first-time setup and will be prompted to link their authenticator app again using a new QR code.