> For the complete documentation index, see [llms.txt](https://docs.kpnthings.com/kpn-things/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.kpnthings.com/kpn-things/general-functions/user-management/two-factor-authentication.md).

# Two Factor Authentication

Enhance the security of your KPN Services account

All KPN services use the **GRIP** authentication solution. As of 16 April **two-factor** **authentication** (2FA) is enabled for all Freemium and Explorer users. For other customers, this will be enabled as the default at a later stage; however, they can already activate it themselves. On this page, you can read how to manage the settings for two-factor authentication. Changes made to authentication settings will apply to **all users.** 

### **How to manage 2FA**

These settings can be adjusted by an **admin user** in the GRIP portal. Go to the [GRIP portal](https://mijnzakelijk.kpn.com/) or go in the Things Portal to the Organization tab, the Users page and click 'Edit roles':

1. Go to **Directories** in the menu
2. Select the **GRIP** directory
3. Open the **Authentication** tab

You are now in the Authentication settings of your GRIP environment.

<figure><img src="https://1453626848-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl6RrePMSAjRvOgcHjMBZ%2Fuploads%2FO2oVEFi4ebSMUNshRJ6j%2FMulti%20factor%20authentication%201.png?alt=media&amp;token=5ff48fd5-296e-4d92-a5b5-ead22d340919" alt=""><figcaption></figcaption></figure>

## Standard setting (for Freemium and Explorer)

Scroll down in the **Authentication** menu to find the **Authentication Level** settings.

1. The **Required Authentication Level score** determines the points you need to reach before you can log in successfully. The standard setting is **30** points.&#x20;
2. **Credentials** (username/password) provide **20** points. Additionally, **10** (extra) points can be obtained with verification via SMS or Email.
3. The verification method **Passkey** provides the user with **30** points,once the Passkey has been created. &#x20;

<figure><img src="https://1453626848-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl6RrePMSAjRvOgcHjMBZ%2Fuploads%2FcB2ZQxAhUbbriP6S5p87%2FMulti%20factor%20authentication%20Settings.png?alt=media&amp;token=d2914f1b-6c0c-4b9e-a0a6-b8b8888013c6" alt=""><figcaption></figcaption></figure>

<figure><img src="https://1453626848-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl6RrePMSAjRvOgcHjMBZ%2Fuploads%2FV169CRo9wzaryNCPYnBK%2FPasskey.png?alt=media&amp;token=311eb859-ddc0-4333-b7a5-fecab51a57cc" alt=""><figcaption></figcaption></figure>

## Activate two-factor authentication (for other customers)

After you logged in to the [GRIP portal](https://mijnzakelijk.kpn.com/) and followed the steps as mentioned at [How to manage 2FA](https://docs.kpnthings.com/kpn-things/general-functions/user-management/multi-factor-authentication#how-to-configure-mfa), scroll down in the **Authentication** menu to find the **Authentication Level** settings.

Adjust the settings for the **Required Authentication Level** and set the **Authentication points** for SMS and Emai&#x6C;**.**&#x20;

{% hint style="success" %}
The settings as shown above are the **best practice** for **two-factor authentication**: combining SMS or Email with Credentials creates the required score for a successful login.
{% endhint %}

## Two Factor login

The login interface for all users has been **updated.** After filling in your **credentials** (username and password) you can choose your **preferred** option to log in successfully.

<figure><img src="https://1453626848-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl6RrePMSAjRvOgcHjMBZ%2Fuploads%2FwBC2Fig1sbeFefqPybT3%2F2FA%20optie%20kiezen.png?alt=media&amp;token=55294a78-84bb-4542-91e3-0ecfea90565a" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
If you choose verification via SMS, it is important that a mobile phone number is set in the user account. Please check (and update, if necessary) this in the account of the relevant user via **Users** in the **GRIP portal**.\
\
From the Things Portal, the user can check (and update) this themselves via: **Profile** (top right) → **My KPN user details** → **Personal information**.
{% endhint %}