How to create a two-factor authentication (2FA) exception list

You can set up a two-factor authentication (2FA) exception list, so that specific users are exempt from being required to complete two-factor authentication to log in and access their Mews account. This is useful for specific cases, where implementing enforced two-factor authentication is challenging. You can learn more about the 2FA login journey in Mews here. 

 

Setting up 2FA adds an extra layer of security to your Mews property account. It is important to secure your accounts to protect sensitive guest information, financial and company data from unauthorized access. As a security best practice, Mews enforces 2FA as mandatory for all Mews accounts. 

 

For users exempt from completing 2FA to login, you can lock and unlock your account to secure it when not in use. You can learn how to lock your account here.  

 

Note:  

  • Only property admins that do not report to a supervisor, and have the Reset 2FA permission, can view and enable this option in Mews Operations. 
  • Mews strongly recommends that you enforce 2FA across all user accounts where possible, to ensure the security of your users' and clients' data.  
  • Users who already have 2FA enabled within their account settings cannot be exempt from 2FA. To exempt them, they first need to have their 2FA reset by an Admin to password only login. You can then add them to an exception list by following the steps in the article below.  
  • If a user account does not have 2FA enabled for any reason, for example, being on an exception list, the system masks the customer data. 

  

In this article, you can learn about: 

 

To exempt certain users from 2FA: 

  1. In Mews Operations, go to the main menu > Settings > Property. 
  2. Click Security. This opens the Security screen.
  3. In the Two-factor authentication (2FA) section, click Manage exceptions.
  4. In the 2FA exceptions side panel section, click the Email addresses field and type to enter specific user email addresses you can select to exempt from 2FA. You can make multiple selections. 

2FA exceptions side panel - select email addresses

  1. Click Save.

This exempts the users you select from logging in with two-factor authentication. 

 

 

You can learn about securing your Mews Operations user accounts here. 

Was this article helpful?
00



Feedback