Configuring Multi-Factor Authentication

Multi-factor authentication (MFA) provides an additional layer of security for Veeam ONE user accounts. When MFA is enabled, users confirm their identity with a one-time password (OTP) generated in a TOTP authenticator application, in addition to their user name and password. On the Multi-Factor Authentication tab of the Access Management section, you can enable or disable MFA for all users, enable or disable MFA for individual users, and reset MFA for a user.

On the Multi-Factor Authentication tab, users are listed with the User Name, Status, and User Role columns. The Status column shows one of the following values:

• Disabled — MFA is turned off for the user.
• Not configured — MFA is enabled for the user, but the user has not set it up yet.
• Configured — the user has set up MFA.

MFA applies when users log in to Veeam ONE through both Veeam ONE Web Client and Veeam ONE Client. For details, see Accessing Veeam ONE Components.

Required Permissions

To manage MFA for Veeam ONE users, a user must have the Veeam ONE Administrator role. This includes enabling or disabling MFA globally or for individual users, and resetting MFA. Individual users do not need this role to set up their own MFA: when MFA is enabled for a user, that user is prompted to set it up in an authenticator application at the next login. For details on user roles, see Security.

Enabling or Disabling MFA for All Users

To enable or disable multi-factor authentication for all Veeam ONE users:

1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

2. At the top right corner of the Veeam ONE Web Client window, click Configuration.
3. In the configuration menu on the left, click Access Management.
4. On the Multi-Factor Authentication tab at the top of the user list, click Configuration.
5. In the MFA Configuration window, set the Multi-factor authentication (MFA) toggle to enable or disable MFA for all users.
6. Click OK.

Enabling or Disabling MFA for Individual Users

You can enable or disable MFA for an individual user only when MFA is enabled globally. The per-user status then overrides the global setting — for example, you can disable MFA for a specific user so that this user can log in without MFA. When MFA is disabled for all users, the Enable, Disable and Reset commands are dimmed.

To enable or disable multi-factor authentication for an individual user:

1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

2. At the top right corner of the Veeam ONE Web Client window, click Configuration.
3. In the configuration menu on the left, click Access Management.
4. On the Multi-Factor Authentication tab, select one or more users whose MFA status you want to change.
5. At the top of the user list, click Enable or Disable.
6. Click Confirm.

Resetting MFA

If the user can no longer pass multi-factor authentication — for example, the user lost access to the authenticator app or replaced the device — you can reset MFA for this user. Administrators can reset MFA for any user from the Multi-Factor Authentication tab. Users can also reset their own MFA. Reset is available only if at least one selected user has the Configured status.

To reset multi-factor authentication for a user:

1. Open Veeam ONE Web Client.

For details, see Accessing Veeam ONE Components.

2. At the top right corner of the Veeam ONE Web Client window, click Configuration.
3. In the configuration menu on the left, click Access Management.
4. On the Multi-Factor Authentication tab, select one or more users whose MFA you want to reset.
5. At the top of the user list, click Reset.
6. Click Confirm.

After you reset MFA, the current MFA setup for the user is cleared. At the next login, the user is prompted to set up MFA again.

Resetting Your Own MFA

You can reset your own MFA without administrator assistance.

To reset your own multi-factor authentication:

1. Open Veeam ONE Web Client. For details, see Accessing Veeam ONE Components.
2. In the top right corner, click your user name, and then click Reset MFA.
3. Click Reset.

After you reset MFA, your current MFA setup is cleared. At the next login, you are prompted to set up MFA again.