--- title: "2FA Enrollment" slug: "2fa-enrollment" updated: 2025-09-29T12:26:26Z published: 2025-09-29T12:26:26Z canonical: "docs.connect.visma.com/2fa-enrollment" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.connect.visma.com/llms.txt > Use this file to discover all available pages before exploring further. # 2FA Enrollment You can enroll Two-factor authentication (2FA) in three ways: 1. When signing in to an Application 2. When performing a higher security action (step-up) in an Application 3. [Self-enrolling in your Account Settings](/v1/docs/enable-2fa-account-settings) ### 2FA Enrollment 2FA Enrollment may show up if you are signing in with a password and the application you are trying to access recommends that you enable it. It may also be required by the application or enforced by your customer administrator security policy. In this case, after passing the password login with success you are prompted to enable Two-step verification (2FA). ![IdentityProvider_2Step_Enforced](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_Enforced.png) If enrollment is set as optional you will see a “Remind me later” button, however we strongly recommend you enable 2FA to protect your account. ![IdentityProvider_2Step_OptOut](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_OptOut.png) ### Choose your Authenticator app As a preferred choice, the wizard shows the option to download our [**Visma Authenticator**](/v1/docs/authenticator-app) app free of charge which has the benefit of allowing you to use **secure & convenient mobile Push notifications** as two-step verification**.** It also supports 6 digit codes shown in the same app as well. ![IdentityProvider_2Step_DownloadVisma](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_DownloadVisma.png) If you do not wish to enable push notifications and wish to use a different authenticator app click on **I use a different Authenticator app and** [**go to this step**](/v1/docs/2fa-enrollment#use-a-different-authenticator-app)**.** ### Enable Push notifications in Visma Authenticator app 1. **On your mobile phone, scan the QR code shown in the step to download** the Visma Authenticator app (Note: you can also **search for Visma Authenticator in your app store** if you cannot scan the QR Code for some reason) 2. After installing the app **on your mobile phone, make sure to ALLOW NOTIFICATIONS** from the app when your mobile presents this question. In case you do not, please go to the Applications in your phone settings and search Visma Authenticator to update it’s permissions to allow notifications 3. Once the app is installed you can open it and you get the option to “Add account” ![AuthenticatorApp_AddFirstAccount](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthenticatorApp_AddFirstAccount.png) 4. **Go back to the web on the screen from step 2** and click **Next,** the screen will show another **QR Code which can be scanned on the mobile to add your account** ![IdentityProvider_2Step_ScanVisma](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_ScanVisma.png) 5. **On the mobile phone click on Add account** and and you get the option to **Sign in** or **Scan QR code** ![AuthenticatorApp_AddFirstAccountOptions](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthenticatorApp_AddFirstAccountOptions.png) 6. Choose **Scan QR code and scan the QR code shown on the web on step 4** 7. **Having trouble to scan?** You can enter manually or copy/paste if on same device, the “Account secret key” shown on step 4, by clicking on “Input key “![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthenticatorApp_ScanQRCode_InputKey.jpg) After you click on input key, you have the option to enter the Account secret key from step 4 in this screen ![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthenticatorApp_AddAccountwiWithInputKey.jpg) Click on “Add“ in order to get the account added. 8. **On your mobile phone**, you will get this screen showing a Verification code, i.e “YLUI” ![IdentityProvider_TwoStepWizard_AuthenticatorApp_SettingUpAccountAfterScan](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_AuthenticatorApp_SettingUpAccountAfterScan.png) 9. **On the web,** you are must accept that Visma Authenticator will add your account. Note the Verification code (e.g. “YLUI”) on the bottom of the screen has to match the value you are presented with on your mobile. Accept the consent if it is the same value and deny if not. ![IdentityProvider_TwoStepWizard_ConsentScreen](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_ConsentScreen.png) 10. Once you accept the consent, you get this screen on the web while your mobile phone is completing its account setup. Note: In order for the mobile app to complete the setup, you have to have the app open in the foreground. ![IdentityProvider_TwoStepWizard_CompletingAuthenticatorAppSetup](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_CompletingAuthenticatorAppSetup.png) 11. On the mobile phone your account is now added and 2FA Push Notifications is enabled ![IdentityProvider_TwoStepWizard_AuthenticatorApp_AccountAdded](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_AuthenticatorApp_AccountAdded.png) ### Use a different Authenticator app If you do not wish to use 2FA Push notifications by adding your account into the Visma Authenticator app, you are free to use any other Authenticator app for using 6 digit codes as two-step verification. Keep in mind that the 6 digit codes are also generated by the Visma Authenticator app same as any other Authenticator app, but in addition using our app enables you to use push notifications. In order to add your account into the Authenticator app of your choice (Google Authenticator, Microsoft Authenticator or any other) 1. While you are on the step below click **I use a different authenticator app** button on the bottom of the screen ![IdentityProvider_2Step_DownloadVisma](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_DownloadVisma.png) 2. You will get presented a screen with a QR code to scan to add your account into your Authenticator app ![IdentityProvider_2Step_ScanOther](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_2Step_ScanOther.png) 3. Open your Authenticator app and scan the QR Code. 4. If you are not able to scan the QR Code, you can also enter the key manually as a secret key. 5. Once you have added your account into the Authenticator app, you will get the 6 digit authenticator code generated. 6. Use the 6 digit authenticator code generated by your Authenticator app to complete the two-step verification setup on the web 7. ![IdentityProvider_TwoStepWizard_EnableOtherAuthenticatorApp](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_EnableOtherAuthenticatorApp.png) **Note**: each 6 digit authenticator code is valid 30 seconds, usable only once and it is **time based**. If you are facing issues regarding the code not being valid, please check your time settings on the mobile and **sync your clock** to ensure no time related problems interferes After you have added Visma Authenticator app or any Authenticator app of your choice, the **two-step wizard continues with other options to ensure that you do not get locked out** in case you loose access to your Authenticator app ### Optionally add a phone number to enable SMS as two-step verification option In order to have alternative options for your two-step verification, we optionally allow you to add a phone number. If you do not wish to have 2FA SMS as a backup option, just click “Next” without filling in your phone number to skip it. Note: This step is not shown in case you have previously already added a phone number to your account. **Although this step is optional**, it is useful as a backup 2FA-option in case you loose access to your Authenticator app for some reason. ![IdentityProvider_TwoStepWizard_AddPhone](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_AddPhone.png) Once you choose your country prefix and input your phone number, click on **Next**. On your phone you will receive a 6 digit code which you need to input in the next screen in order to allow us to verify the ownership: ![IdentityProvider_TwoStepWizard_AddPhone6Digit](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_AddPhone6Digit.png) Click on **Next** in order to verify the 6 digit code and continue. In case you have entered a wrong phone number, you can go **Back** and **enter a phone number again** to restart. ### Store the one-time emergency code to not get locked out As the very last step in the 2FA Enrollment, a **one-time emergency code** is generated and shown in the screen: ![IdentityProvider_TwoStepWizard_OneTimeEmergencyCode](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/IdentityProvider_TwoStepWizard_OneTimeEmergencyCode.png) **Make sure you COPY and STORE this code somewhere safe** to be able to use it as an alternative should you loose access to your phone. After you have copied it, your need to check the checkbox left to **“I have safely copied and stored this code“.** After doing so, you are able to **click on Next.** **Congratulations! You have successfully completed the 2FA Enrollment and your account is protected.**