FAQ: Multi-Factor Authentication

What if I don’t have a mobile device?: If you don’t have a mobile device, you can use a browser-based option, such as 1Password. These services provide browser plugins that can scan a QR code displayed on the browser page.
Can Single Sign On (SSO) users enable multi-factor authentication (MFA)?: No. Currently only users with the authentication type of VNDLY Login
can use MFA.
What happens if an administrator selects to disable multi-factor authentication (MFA) for a set of users?: If MFA is disabled for a user, they won’t be prompted for a device token upon logging in to Workday VNDLY.
What happens if a user loses their token or they get a new phone?: If a user no longer has access to their token, they must contact Workday VNDLY Support to have their device record removed. After the record has been removed, the user can re-enroll using their new device. See Set Up Multi-Factor Authentication as a User in Workday VNDLY.
Why is my token being rejected as invalid?: Ensure that the time on your device is synced correctly. The tokens are generated based on the current time, so both the site and authentication device must display the same time. Also, if you have multiple tokens for different sites, ensure that the token matches the site you're wanting to log in to.
I provided a token in my authenticator app after it expired, but it was recognized as valid. Shouldn't it only accept the currently displayed token?: Due to network latency, it’s policy for our system to validate a token for the previous 30 seconds. There might be an acceptable time delay between when the token is generated and when it’s validated in our system.
What happens when a user has multi-factor authentication (MFA) set up, but no longer has access to the 6-digit token required for login?: This typically occurs when the user has a new device, or reinstalled or removed their authenticator app, resulting in the loss of their previously configured MFA token.
An administrator with the necessary permissions can reset MFA for the user. See Reset Multi-Factor Authentication For Another User.