Note: Multi-Factor Authentication (MFA) will be required for all users according to a scheduled mandatory roll-out date.
FirstMLS and the industry leaders we partner with take safeguarding your livelihood seriously. For this reason we have begun instituting the requirement of Multi-Factor Authentication (MFA). We also know that while you're out in the field timing can be critical, that's why you'll have options on what method of MFA you use. You may choose to receive a code through text message or to use an authenticator app (of your choosing) along with your password to log into the system.
Setting up Multi-Factor Authentication
To set up your MFA before the deadline, follow the prompt when logging in to the system, or once you're in the system from the Dashboard click on the profile icon in the upper right corner next to the notification bell.

From the dropdown, select Profile Settings.
On your Profile Settings page, scroll down to the section titled, "Secure your Account".

Here you will choose either SMS Authentication or One Time Password. If you've followed the login prompt the screen may display the same options, but worded a little differently:
What's the difference? SMS Authentication means that when you attempt to log in, you will receive a text message with a random security code which you then enter onto the webpage to log in. A One Time Password is the same in that it will generate a random code which you type into the website, but instead of receiving it as a text message you would open whichever app you chose to generate those numbers.
Some things to consider: Receiving a code as an SMS text does count against your available texts if you are not on an unlimited texting plan. However, as long as you continue to have access to the phone number you enter during setup this option would remain unaffected (if for example you upgraded to a new phone next year). If you choose to setup through a third party app, realize that if you lose or upgrade or otherwise can no longer use that device, you may run into significant problems later, depending upon which app you choose and its specific backup methods.
Choosing to enable MFA through SMS Authentication
If you choose to receive your security code via text messaging, click the Setup link at the right of the SMS Authentication selection bar.
Because you are choosing to make an alteration/update to your security preferences, the system will prompt for your current password.
If you have not already, you will need to select and answer three security questions. Each answer must be at least three characters long, without special characters, and are not case sensitive. Choose
Once your security questions have been resolved, press Save.
The system will then prompt you for the Mobile Phone Number. This will be the phone number you receive the codes to in order to log in (so make sure this is a device you always have handy when you're logging in to the system). If the phone number is based in the US, enter the phone number after the +1 including the area code. If your phone number is not US based, click the flag to the left of the number and select your country from the list. In that case, the international country code will appear, enter the full number after it.
Click Continue.
To confirm you entered the correct number, the system will send a verification code. Type the code you receive to the phone number you entered into the screen and click Continue. Please allow for a minute or two to receive the code. If after that time a code has not been received, click Resend the code.
If the code is accepted, you will be shown a screen encouraging you to WRITE DOWN YOUR RECOVERY CODE. In case you ever lose your phone or cannot otherwise generate a correct code the recovery code shown on the screen will allow you to disable MFA temporarily while you reset your device and/or security choices.
Once this is done the setup is complete. Remember to keep your texting device handy when you log in from now on!
Choosing to Enable MFA through an app
If you have decided to use a code provided by an app you will first need to download and install the app you've chosen. While we have no official or recommended app, two examples are shown below
| Apple | Android |
Google Authenticator |  | |
Authy | | |
Once your app is configured, click the One Time Password option.
Because you are choosing to make an alteration/update to your security preferences, the system will prompt for your current password.
If you have not already, you will need to select and answer three security questions. Each answer must be at least three characters long, without special characters, and are not case sensitive. Choose
Once your security questions have been resolved, press Save. The screen below will appear.
Follow the instructions of your chosen app. Most apps, including those mentioned above, will instruct you to point the camera of your device at the QR code displayed on your screen. Once the code is scanned it will appear in your app as First MLS SSO Gateway. A code for that entry should be shown. To confirm the setup, enter the code shown on your app into the box on the screen and click Continue.
If the code is accepted, you will be shown a screen encouraging you to WRITE DOWN YOUR RECOVERY CODE. In case you ever lose your phone or cannot otherwise generate a correct code the recovery code shown on the screen will allow you to disable MFA temporarily while you reset your device and/or security choices.
Your MFA is now set up. Remember to keep your app handy when you log in to the system!