ShipHawk Guide

Using Two-Factor Authentication (2FA) in ShipHawk TMS

Two-factor authentication (2FA) will be available starting with ShipHawk TMS 2024.4.0 release. Admin users can enable 2FA through the Settings->”System Access / 2FA” screen.

Two-factor authentication (2FA), or multi-factor authentication (MFA), adds more security when you sign in to ShipHawk TMS and reduces the chance of unauthorized access to your ShipHawk account.

With 2FA, you must use two ways to identify yourself for extra security. The first way is when you sign in by entering your password; the second way is when you enter a special code sent to a separate device, typically your mobile phone.

If your system administrator has enabled two-factor authentication (2FA), you will have additional sign in steps when accessing ShipHawk:

  • When 2FA is initially enabled, you must install an Authenticator app on your computer or mobile device and enter the ShipHawk-generated code or QR barcode into that app. This will only display the first time you login to ShipHawk or if your admin resets your user account.

  • Once configured, you will asked to enter your password and 2FA code from the Authenticator app every time you log in to ShipHawk.

Get Authenticator App

As a new user accessing a system using 2FA, or as a current user accessing the system after 2FA has been activated, you will need to get an authenticator app downloaded and installed on your mobile device. Using either Google Play or Apple’s App Store, get one of the following on your mobile device:

  • Google Authenticator (recommended)

  • Salesforce Authenticator

  • Microsoft Authenticator

  • 2FAS Authenticator

Do the 2FA Handshake

The first time that 2FA is enabled, you need to complete the “handshake” between your ShipHawk TMS account and your mobile device:

  1. Sign in to ShipHawk TMS.

  2. A pop-up window displays the following:

    image-20240514-174714.png


    Your ShipHawk Administrator has enabled Two-Factor Authentication (2FA) for this account.

  3. Click Generate code for 2FA.

  4. A QR code is displayed on the screen:



  5. If you haven’t already downloaded an authenticator app (such as Google Authenticator), do so now.

  6. Open your authenticator app, such as Google Authenticator, and scan the QR code or enter the 24-digit code.

  7. The authenticator app will generate a 6-digit code. Enter that code in the Verification Code field.

  8. Click Sign In.

  9. You can now access ShipHawk TMS. This completes the “handshake” between your ShipHawk TMS account and your mobile device.

Logging in with 2FA

Now, whenever you sign in, after you enter your password, you will be prompted to enter a 6-digit authentication code:

Open and check the authentication code on your authentication app, enter the code, and click Sign In.

What if I Get a New Phone or lose access to the authenticator app?

Contact your system administrator, who will reset your account so that you can do the “handshake” steps with your new device or app.

 

Can I get an SMS/text message or e-mail instead of using an authenticator app?

No, ShipHawk only supports 2FA using modern, secure authentication apps. These are more secure than other methods of 2FA as the security code is generated locally in the app rather than being transmitted electronically where they can be intercepted or diverted. Transmitted codes are not as secure as Authenticators.

 

Contact Technical Support
© ShipHawk 2024. All Rights Reserved.