---
title: "Multi-factor authentication (MFA) - icom Connectivity Suite"
slug: "multi-factor-authentication-mfa-icom-connectivity-suite"
updated: 2026-10-21T08:50:15Z
published: 2026-10-27T06:00:17Z
canonical: "docs.insys-icom.com/multi-factor-authentication-mfa-icom-connectivity-suite"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.insys-icom.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Multi-factor authentication (MFA) - icom Connectivity Suite

## Multi-factor authentication for a user to log in to the portal

The multi-factor authentication (MFA) adds another security level to the login via user name and password by requiring the additional input of a one-time password to login to the portal of the **icom Connectivity Suite**. The password will be generated by an app on a separate device (e.g. smartphone) via the TOTP (Time-based One-time Password) algorithm. The user account of the **icom Connectivity Suite** must be registered one-time in the app for this. TOTP is an open standard and a variety of apps are available for various platforms such as the Open Source software [FreeOTP](https://freeotp.github.io/). Since the one-time passwords are generated time-based and only valid for a limited time, it is necessary that the time on the separate device is accurate and synchronised regularly.

There are two options for setting up MFA for a user:

- By the user using the parameter *Multi-factor authentication (MFA)*.
- By a user with admin rights for all users using the parameter *Require multi-factor authentication (MFA)*.

Multi-factor authentication can either be enabled directly when creating a user account, or enabled and disabled at a later date on the [*User Information*](/kb/docs/user-information-icom-connectivity-suite) page.

Users with admin rights can use the *Require multi-factor authentication (MFA)* parameter to make MFA mandatory for other users. Users with read-only rights can use the *Multi-factor authentication (MFA)* parameter to enable MFA for themselves if it is set to **Inactive**, or, if it is set to **Active**, to reconfigure it (for example, to set it up on a new smartphone).

> [!NOTE]
> Please note!
> 
> Read-only users cannot disable MFA. Only admin users with the can disable MFA for a ready-only user.

> [!NOTE]
> Please note!
> 
> If a user’s MFA has been reactivated or renewed, it is no longer possible to generate a **valid** code using the app that was originally set up.

## Setting up multi-factor authentication by the user

To set up multi-factor authentication, a user must follow these steps when prompted to do so during login:

1. Scan the QR code displayed using the TOTP app.
2. Generate a one-time password in the app.
3. Enter this one-time password in the **icom Connectivity Suite**.

Multi-factor authentication is now set up for this user. A one-time password will then be requested each time they log in.

> [!NOTE]
> Need to set up several devices for TOTP?
> 
> If you copy the **TOTP secret** from the Set up *Multi-Factor Authentication (MFA)* popup, you can setup multiple devices to generate a valid PIN, so long as those devices have an accurate time set.