Skip to main content

Security

The Security Settings page allows users to change their password, manage API keys securely, and configure two-factor authentication (2FA) for enhanced account protection.

Change Password

The Change Password section lets users update their account password by entering the old password, a new password, and confirming the new one. Each field has a visibility toggle to show or hide the input for added security.

To change the password for your account, follow these steps:

  1. Log in to the SureMDM Hub Console.

  2. In the Account Management, click on Security to find the Change Password settings.

  3. Enter your account’s Current Password, along with the New Password to be set.

  4. Confirm the new password and click on Save button to change the account’s password successfully.

API KEY

The API Key section displays the user's unique key used for authentication in external integrations. Users can view or copy the key, ensuring secure access control to the system's APIs.

This API key allows admins to integrate SureMDM Hub with their own user interface.

To view the API Key for your account, follow these steps:

  1. Log in to the SureMDM Hub Console.

  2. In the Account Management, click on Security to find the API Key

  3. You can view or copy your account's API Key from here.

Two Factor Authentication

The Two Factor Authentication section allows users to enable Two-Factor Authentication (2FA) for added security using options like Google Authenticator, Email Address, or Phone Number. Users can also enforce 2FA for all sub-users using these methods.

To configure 2FA on your account, follow the below steps:

  1. Log in to the SureMDM Hub console.

  2. In the Account Management, click on Security to find the Two Factor Authentication settings.

  3. Enable the toggle button for Two Factor Authentication

note

This option will be visible to all the users, including Account Admin and Sub-users.

  1. Select the 2FA method among the following options: Google Authenticator, Email Address and Phone Number.

  2. If Google Authenticator is selected, then download the Google Authenticator app, scan the QR Code, enter the code fetched from the app, along with the current account password and click on the Submit OTP button.

  3. If the Email Address is selected, enter the OTP received on the email address used while creating the account (auto selected in the email address field), along with the current account password and click on the Submit OTP button.

  4. If the Phone Number is selected, enter the OTP received on the phone number used while creating the account (auto selected in the phone number field), along with the current account password and click on the Submit OTP button.

    • If all the details are correct, then Two Factor Authentication gets enabled successfully.
  5. Users should be able to login to the SureMDM Hub account with the Code/OTP received on the configured 2FA method.

note

Users should be allowed to Reset the Two Factor Authentication.

To enforce 2FA on sub user accounts, follow the below steps:

  1. Log in to the SureMDM Hub console.

  2. In the Account Management, click on Security to find the Two Factor Authentication settings.

  3. Enable the toggle button for Two Factor Authentication and configure 2FA for the admin account.

    • This will make the Enforce 2FA for all sub-users option available to use.
note

This option should be visible only in the Admin user account.

  1. Enable the toggle button for Enforce 2FA for all sub-users

  2. Select the 2FA method to be allowed for the sub users to configure 2FA and click on the Submit button.

note

One or more of these methods can be selected at once. By default, all the methods will be selected.

  1. Confirm to proceed with the enforcement of 2FA on all sub users.

    • If all the details are correct, then Two Factor Authentication gets enforced on all the sub users successfully.
  2. Sub users should be able to configure 2FA on the login page based on the methods allowed by the admin user and successfully login to their account.

note
  • The sub user can reconfigure the 2FA in the Account Management > Security if multiple 2FA methods are allowed by the admin user.

  • The sub users cannot disable 2FA on their accounts, if it was enforced by the account admin.

To disable 2FA on your account, follow the below steps:

  1. Log in to the SureMDM Hub console.

  2. In the Account Management, click on Security to find the configured Two Factor Authentication settings

  3. If 2FA is enforced on sub-users, then disable the toggle button for Enforce 2FA for all sub-users

  4. Confirm to proceed with the disabling of 2FA enforcement on all sub users.

  5. Now, disable the toggle button for Two Factor Authentication.

  6. Enter the Code/OTP received in the configured method and click on Submit to successfully disable 2FA on the admin user account.