Glossary

What is MFA?

Multi-Factor Authentication

Definition

MFA — multi-factor authentication — requires something in addition to a password, such as a one-time code or a hardware key, so a leaked password alone is not enough to sign in.

Three kinds of factor

  • Something you know: a password
  • Something you have: a phone with an authenticator app, a security key
  • Something you are: a fingerprint or face (often to unlock a passkey)

Passkeys

Passkeys use public-key cryptography instead of a password and resist phishing, because the key only works for the genuine domain.

Why it matters for ERP

An ERP holds financial, customer and payroll data. With MFA, even if an employee’s password is phished, an attacker can’t sign in without the second factor.

Example

The admin makes two-factor sign-in mandatory for the “CFO” and “admin” roles; other users can enable it voluntarily.

MFA in Fidar

Authenticator-app codes, SMS and passkeys are supported on every plan and can be made mandatory per role. More in security and access.

Updated:

From definition to practice

See how these concepts work on real company data in Fidar.