Multi-factor Authentication for staff/admin
C
Craig Whelan
MFA (multi factor authentication) should be available to anyone having access to any part of the Phorest system...a basic security capability found in most systems these days, especially those that are SaaS based.
Ideally using an app (Google Authenticator, LastPass, Microsoft Authenticator) for example rather than SMS.
A four digit pin to access the system feels woefully inadequate given the nature of the data being stored - client records etc.
If I'm missing something, please point me in the right direction to enable and configure
Thank you for the consideration
J
Jose Segura
I would like Phorest to prioritize two-factor authentication, particularly for administrator accounts, along with a login history that salon owners can access directly.
As a salon owner, I frequently change administrator passwords because I am concerned that staff may learn them by watching administrators enter them on their computers. This creates a risk of unauthorized access to sensitive business information and restricted functions.
Currently, I cannot easily review who has accessed the system through an administrator account, and obtaining login reports through support can take months. Owners need timely access to this information to investigate concerns and protect their businesses.
I would like to request:
Two-factor authentication for administrator accounts, with the option to require it for all users.
An accessible login history showing the account used, date and time, device, and IP address.
Alerts for logins from unfamiliar devices.
Individual user access and activity records to improve accountability, since a login under a shared administrator password does not identify the person using it.
These features would help salon owners protect client and business information, manage access, and respond promptly to suspected unauthorized use.