Mandatory Multi-Factor Authentication (MFA) for SmartConnect Accounts

Issue:
Users may be prompted to configure Multi-Factor Authentication (MFA) when signing in to SmartConnect and may have questions regarding supported authentication methods, account recovery, device replacement, or whether MFA can be disabled.

Product Line:
Smart-UPS with SmartConnect

Environment:
All Serial Numbers

Cause:
Schneider Electric has implemented mandatory Multi-Factor Authentication (MFA) across its digital ecosystem to enhance security and protect sensitive customer data. MFA helps reduce the risk of unauthorized access, phishing attacks, keyloggers, and other credential-based threats.

Resolution:

1. What is MFA?
   Multi-Factor Authentication (MFA) requires users to verify their identity using two or more authentication factors, such as a password and a verification method on a trusted device.
   
   

2. What MFA methods are supported?
   • Auth0 Guardian Authenticator
   • Google Authenticator or similar authenticator apps
   • SMS verification codes
   • Fingerprint or Face Recognition (Biometric Authentication)
     
     
3. How do I set up MFA?
   
   • Sign in to your Schneider Electric account.
   • Select your preferred MFA method when prompted.
   • Complete the verification process.
   • Save the recovery code in a secure location. This code is required if you lose access to your MFA device.
     
     
4. Can I change my MFA method?
   • Yes. Navigate to Profile > Two-Factor Authentication, confirm your password, and update your preferred authentication method or registered mobile number.
     
     
5. What if I lose my MFA device?
   • Use the recovery code generated during MFA enrollment to access your account. After successful verification, you can configure a new MFA method and save a new recovery code.
     
     
6. Can I disable MFA?
   1. No. MFA is mandatory and cannot be permanently disabled. If MFA is removed from your account settings, you will be required to set it up again during your next login to comply with Schneider Electric cybersecurity policies.
      
      
7. Additional Information:
   1. One-Time Passwords (OTPs) typically expire within 15 minutes.
   2. Recovery codes are intended for one-time use and should be stored securely.
   3. Never share your recovery code with anyone.

For full details, visit Multi-Factor Authentication Frequently Asked Questions.

Released for: Schneider Electric USA