What is it? Multi-Factor Authentication, or MFA, is a process that requires more than one type of authentication to gain access to a program. You have probably seen this with your bank or other secure websites. When you enter your username and password, a second layer of security will appear. Once you pass this additional level you will then gain access to the program. Why? The primary reason behind the addition of MFA is that it has become a compliance requirement in the industry. However, here at Jackson Hewitt we strive to give the best client experience, and a large part of that is keeping our customers information safe. MFA is an added layer of security that helps secure all of our customer s information. What you need to know! There are three different types of authentication. Although only one is required, we recommend that you authorize all three and use a different phone number for the SMS Authentication and Voice Call Authentication. This will ensure that if one way fails you will have a backup. For example, if you are trying to authorize using the SMS Authorization and your mobile device is not charged up, you will still be able to use the Voice Call Authentication if you have used a secondary phone number. Once you have set your authentication it will be active for 30 days. Once the 30 days have expired you will be required to reset the authentication again. (NOTE: at press time the screens reflect a 14 day expiration) When setting up or logging in with your authentication, the system will time out after 5 minutes. If this happens close the tab that you are in and start the process again from the JHnet login screen. Authentication (not registration) is by device. What this means is that once you have registered and authenticated on one computer and then moved to another, you will need to complete the authentication process again. For example, you may work in a Walmart on Monday and have authenticated on that computer. Then on Tuesday you move to a storefront using a different computer, you will then need to complete the authentication process on that computer. In order to authenticate you must see the following appear at the top of your screen. If you refresh your screen this message will disappear and you will not be redirected to JHnet. Jackson Hewitt Tax Service Inc. All rights reserved. 1
How it works. 1. First, log into JHnet using your regular login information. A screen will appear that will allow you to setup your authentication preference. 2. Next, choose which type of authentication you wish to setup. Remember, you can and should setup all three types: a. Okta Verify this uses the Okta mobile app to verify your login. The app is downloaded to your smartphone. b. SMS Authentication this uses a text message on your mobile phone to authenticate your login. c. Voice Call Authentication after entering in a phone number you will receive a callback with an authentication code. Let s look at all three.. OKTA VERIFY The first method of authentication requires you to download the Okta app onto your mobile device. Once the app is installed you will scan a QR code using the app s reader. When the code is accepted your login is then authenticated. Follow these steps: 1. On Your Computer: Click on the Setup button under Verify Okta. 2. On Your Mobile Device: Based on your mobile device, locate and download the OKTA Verify app. Once installed, follow the prompts to open the app on your device. Jackson Hewitt Tax Service Inc. All rights reserved. 2
3. On Your Computer: Click on the appropriate icon based on your mobile device. Then click Next. 4. On Your Mobile Device: For Android devices, click on the pencil in the upper right hand corner of the screen (see graphic). This will open the QR Code Reader. For Apple devices, the app will open directly into the QR Code Reader. 5. Hold the phone up to the computer screen until the QR Code is captured (the screen on your phone will beep and show that it is enrolling your device.) 6. On Your Computer: When complete, click on the Finish button. Logging In After Authentication: 1. On Your Computer: Log into JHnet using your regular login information. 2. On Your Computer: Click on the Send Push button. You may also click on the phrase Or enter code to enter the code from the Okta App. NOTE: If you wish to defer the authentication, you can click on the checkbox next to Do not challenge me on this device for the next 14 days. Once the 14 days have expired you will receive the challenge and may again check this box. As of time of distribution of this document the expiration is set to 14 days. This will change to 30 days when program is rolled out to system. Jackson Hewitt Tax Service Inc. All rights reserved. 3
3. On Your Mobile Device: Open the Okta app and click on the Approve button. Your computer screen will be directed to JHnet. SMS Authentication For this method, the required numeric code is delivered to your mobile device via text message. Once the number has been entered and verified you will be directed to JHnet. 1. Click on the Setup button under SMS Authentication. 2. Enter the phone number and click on the Send Code button. 3. A code will be sent to your phone. Enter this code into the screen and click on the Verify button. 4. When complete, click on the Finish button. The screen will then continue onto JHnet. Jackson Hewitt Tax Service Inc. All rights reserved. 4
Logging In After Authentication: 1. Log into JHnet using your regular login information. 2. Click on the Send code button. 3. You will receive a text message which will include a numeric code. Enter this code into the text box and click on the Verify button. Your computer screen will be directed to JHnet. Voice Call Authentication For this method, the required numeric code is delivered via a secondary phone device. The phone number is entered into the program on the computer and a return call is initiated. An automated operator will recite the code. Once the number has been entered and verified you will be directed to JHnet. NOTE: only enter a phone number that is a direct line to you. If the automated call back needs to navigate a menu, the call will fail. 1. Click the Setup button. 2. Enter the phone number that you wish to receive the call on and click on the Call button. NOTE: The phone number entered must be a direct line. Jackson Hewitt Tax Service Inc. All rights reserved. 5
3. You will immediately receive a phone call. The automated caller will slowly recite the code. Enter this code into the box and click the Verify button. Your computer screen will be directed to JHnet. Logging In After Authentication: 1. Log into JHnet using your regular login information. 2. Click on the Call button. You will receive a phone call the OKTA automated system. 3. Enter the code received on the phone call and click on the Verify button. Your computer screen will be directed to JHnet. Resetting the Authentication Authentications can be reset once you have logged into JHnet. To do this: 1. Log into JHnet using your regular login information and your current MFA. 2. Click on your name in the upper right-hand corner of the screen and then click the Reset All MFA Factors button. Jackson Hewitt Tax Service Inc. All rights reserved. 6
3. A message will appear directing you to logout and login again to setup the authentication again. Support If for any reason the authentication fails, or you are unable to complete the sign-in process, contact the Support Center at 800-668-8264. Please do not contact your supervisor. Jackson Hewitt Tax Service Inc. All rights reserved. 7