Multi-Factor Authentication and Account Admin Role

MFA was added with per-agency, per-role enforcement and device memory, alongside a new Account Admin role scoped to a single client account. Given that claims contain sensitive financial and technical IP data, MFA reduces the risk of unauthorized account access, while the Account Admin role lets a client manage their own users and sources without gaining visibility into other clients' claims or data.

How to use

Set up MFA (users)

1. Go to Settings → Personal.
2. Open the Security section and set up SMS or an authenticator app.
3. On your next sign-in, complete MFA verification.
4. Optionally check Remember this device to skip MFA on that device for 30 days.

Require MFA for your agency (admins)

1. Go to Settings → Agency.
2. Open MFA Requirements and choose which roles must use MFA.
3. Save. Affected users will be prompted to enroll.

Invite an Account Admin

1. Open Users and invite or create a user with the Account Admin role.
2. Assign them to the specific client Account.
3. They can manage that account’s users, sources, and claims only — not other accounts or agencies.