Overview
MFA applies to system user profiles in the web interface. The reev App for drivers is excluded.
You can use a passkey or an authenticator app for MFA. Depending on the sign-in method, the following options are available:
Passkey, for example with Face ID, Touch ID or Windows Hello
Authenticator app with a one-time code
One-time backup code as a recovery option
Requirements
You need the following to set up MFA:
Access to your email address and password for the reev Platform
A mobile device with an authenticator app or a device that supports passkeys
Setting up MFA
Follow these steps to set up MFA:
Sign in to the reev Platform.
Enter your email address and password.
Select one of the available methods in the selection window:
Use passkey
Use authenticator app
Follow the instructions on the screen.
Complete the setup.
MFA with an authenticator app
MFA with an authenticator app
You can use an authenticator app of your choice. The reev Platform does not provide or require a specific authenticator app. Examples include:
Microsoft Authenticator in the Apple App Store or on Google Play
Google Authenticator im Apple App Store or on bei Google Play
FreeOTP Authenticator im Apple App Store or on bei Google Play
Follow these steps to set up MFA with an authenticator app:
Select Use authenticator app in the selection window.
Open the authenticator app on your mobile device.
Scan the displayed QR code with the authenticator app.
Enter the 6-digit one-time code from the app.
Save the displayed backup codes securely.
Complete the setup.
After setup, sign in with your email address, password and the current one-time code from the authenticator app.
MFA with a passkey
MFA with a passkey
A passkey is stored on your device or in a compatible password manager. When you sign in, your device confirms the passkey with a fingerprint, facial recognition or a device PIN. The passkey therefore counts as MFA on its own.
Follow these steps to set up a passkey:
Select Use passkey in the selection window.
Confirm the setup with your device’s security function.
Complete the setup.
For future sign-ins, use your email address and passkey. A password is then not required.
If the passkey is not available on your current device, select Try another way. You can then sign in with your password and another configured MFA method.
Tip: With a shared login, each person can set up their own passkey on their own device. A shared device is not required.
MFA with single sign-on (SSO)
MFA with single sign-on (SSO)
If you sign in using single sign-on (SSO), authentication is handled by your organisation’s identity provider. If your SSO provider already requires MFA, this fulfils the security requirement. In this case, the additional MFA selection window in the reev Platform is not displayed.
MFA with Google or Microsoft sign-in
MFA with Google or Microsoft sign-in
If you link a Google or Microsoft account to an existing reev account for the first time, you must confirm the link with a passkey or with your password and another MFA method. Accounts are not linked automatically based on the email address alone.
Managing MFA in your personal settings
You can manage your available sign-in methods in your personal settings.
Follow these steps to manage your sign-in methods:
Open your personal settings.
Go to Sign-in methods.
Check the status of your available methods.
Select Add to add a method that has not yet been set up.
Depending on the status, the following methods are displayed:
Password
Passkey
Authenticator app
Backup codes and account recovery
When you set up MFA with an authenticator app, you receive 12 one-time backup codes. You do not receive backup codes when setting up a passkey.
You can copy, download or print the backup codes.
Please note the following:
Each backup code can be used only once.
The backup codes are displayed only once after MFA setup.
Backup codes are not displayed again in your personal settings.
You can use a backup code instead of the code from your authenticator app when signing in.
Follow these steps to use a backup code:
Open the reev Platform login page.
Enter your email address and password.
Select Sign in with a recovery code.
Enter an unused backup code.
Note: Store the backup codes securely and separately from your mobile device or your passkey device. Do not share the codes with anyone else.
Resetting MFA
If you no longer have access to your MFA method and your backup codes, contact an administrator of your organisation. The administrator can reset MFA for other system users.
When MFA is reset, the following MFA data is deleted:
The link to the passkey or authenticator app
The backup codes
Your active sessions are ended. Your password remains unchanged. You receive an email and must set up an MFA method again at your next sign-in.
Resetting MFA for another system user
Resetting MFA for another system user
The following steps are necessary to reset the MFA of another system user:
Sign in to the reev Platform.
Open Administration -> Security settings.
Select the option to reset MFA.
Search for the relevant system user.
Confirm the process.
Important: Administrators can reset MFA for other system users, but not their own MFA. To reset your own MFA, you need a second administrator from the same organisation.
If you are the only system user, contact reev Support via chat or email.
Troubleshooting
The one-time code is rejected as invalid
This is often caused by a time difference between your mobile device and the server. One-time codes are valid for only 30 seconds and are based on the current time.
Follow these steps to resolve the problem:
Enable automatic date and time on your mobile device.
Wait until a new code is displayed in the authenticator app.
Enter the new code immediately.
Check that you are using the code for the correct account in the authenticator app.
If the problem persists, delete the existing reev entry in your authenticator app and scan the QR code on the setup page again.
The QR code does not work
If the setup page was reloaded or the setup was cancelled, the previous QR code may no longer be valid.
Follow these steps to obtain a new QR code:
Delete the existing reev entry in your authenticator app.
Start the MFA setup in the reev Platform again.
Scan the newly displayed QR code.
Enter the current 6-digit one-time code.
The passkey is not available on this device
Select Try another way on the sign-in page. Then sign in with your password and another configured MFA method.
If you do not have access to another MFA method or any backup codes, contact an administrator of your organisation. The administrator can reset your MFA.
My password was reset, but MFA still does not work
Resetting your password does not reset your MFA methods. If you no longer have access to your passkey, authenticator app or backup codes, contact an administrator of your organisation.
Frequently asked questions
Do I also receive backup codes when setting up a passkey?
You receive backup codes only when you set up MFA with an authenticator app.
Can I reset my MFA myself?
An administrator can reset MFA for other system users. To reset your own MFA, you need a second administrator from the same organisation.
What happens after an MFA reset?
The passkey, authenticator app and backup codes are deleted. All active sessions are ended. Your password remains unchanged. You must set up a new MFA method at your next sign-in.
