Securing your Mews Multi-Property user accounts

In Mews Multi-Property, you have different security options available to set up for your users and Mews account. You need to ensure that users adhere to security best practices,

  • to avoid data breaches,
  • unauthorized access to sensitive information, and
  • to align with data privacy laws and standards when undergoing audits.

 

You need to set up the security of all Mews user accounts at your property correctly to protect from any unauthorized access of your:

  • User account information, i.e., your employees’ data.
  • Sensitive property and financial information or data.
  • Guest data.

 

To ensure maximum security of your Mews user accounts, the system enforces two-factor authentication (2FA) as mandatory, or you can enable SSO across your Mews Multi-Property account.  

 

2FA confirms user identity and manages access to software, such as Mews Operations. You need two forms of authentication to access resources and data. Enforced 2FA means users sign into their Mews account in two steps:

 

This is to add an extra layer of security to your Mews property account.

 

In this article you can learn about the following:

 

Account security options in Mews Multi-Property

To ensure maximum security of your Mews user accounts, the system enforces two-factor authentication (2FA) as mandatory for all Mews accounts:  

  • Enforced Two-factor Authentication (2FA): Two-factor authentication (2FA) in Mews means signing into your Mews account in two steps; first with your login password and then with an authentication code generated by an authenticator app. You can learn more about 2FA below.

 

Your system admin can set up the following security measures in Mews Operations:  

  • Identity Access Management: A product to help securely manage your users, and their roles, permissions, access rights and more. It helps increase security on your Mews property or portfolio account. You can learn more here. It includes:
    • System for Cross-Domain Identity Management (SCIM): A tool that helps automatically manage user information across your different systems, making it easier to add, update, and remove users in Mews. You can learn more here. 
    • Single Sign-On (SSO): Single Sign-On or SSO is a user authentication service that lets you use one set of login credentials, for example, a username and password, to access multiple applications. You can learn more here.  

 

Note: Only user accounts who have Admin permissions have access to your properties' security options. 

 

Two-factor Authentication (2FA)

This forces all Mews Operations users to enter an additional one-time verification code during login along with their username and password. To ensure maximum security of your Mews user accounts, the system enforces two-factor authentication as mandatory for Mews accounts.

 

User accounts are more secure when users sign in using both a password and an authentication code. Even if the password is compromised, the system continues to require a one-time 6-digit authentication code. For specific roles where two-factor authentication is not possible, you can create a 2FA exception list. You can learn more here. 

 

 

You can learn more about the 2FA login journey in Mews here. 

 

Identity Access Management is a product you can purchase for your Mews account, that helps you securely manage your users, roles, permissions, access rights and more. It helps increase security on your Mews property or portfolio account, and that of your users.  

 

It includes: 

  • System for Cross-Domain Identity Management (SCIM): A tool that helps automatically manage user information across your different systems, making it easier to add, update, and remove users in Mews. You can learn more here. 
  • Single Sign-On (SSO): Single Sign-On or SSO is a user authentication service that lets you use one set of login credentials, for example, a username and password, to access multiple applications. You can learn more here.  

 

You can learn more about how to set up System for Cross-Domain Identity Management (SCIM) user provisioning here. 

 
 
Was this article helpful?
00



Feedback