Documentation Index

Fetch the complete documentation index at: https://kb.pigment.com/llms.txt

Use this file to discover all available pages before exploring further.

Configure Multi-Factor Authentication (MFA/2FA)

Prev Next

To sign in to Pigment, Members must use either Single Sign-On (SSO) or Multi-Factor Authentication (MFA). This document outlines the options available, set-up steps, what to expect and the frequently asked questions surrounding MFA.

What Sign-On Methods Does Pigment Support?

Pigment supports the following:

  1. A Pigment configured username and password, followed by MFA.

  2. Single Sign-On using SAML 2.0 protocol. For more information, see Configuring Single Sign On with Pigment.

  3. OpenID Connect (OIDC) using Google, followed by MFA.

What Is MFA?

Multi-factor authentication (MFA) adds security by requiring a second step to the authentication process. In Pigment, MFA requires you to enter a verification code sent to your email, in addition to entering your email and password.

Who Is Eligible For MFA?

MFA is available on all Pigment tiers, but you must have Security Admin access to Pigment to request it to be enabled.

Enabling MFA For Your Workspace

To enable MFA for your Workspace, log a Support ticket with the Pigment Support Team. In your ticket indicate on what date and at what time you want to enforce MFA for your Workspace.

See our guide here if you’re unsure how to log a ticket.

Good To Know

When you enable MFA for your Pigment Workspace, it will be enforced for all Members who log in using email and password credentials. A verification code is sent to the email address linked with the account. If Single Sign-On is enabled, no further verification is required.

FAQs

Is MFA mandatory, or can users still log in using traditional methods?

MFA is required for all Pigment customers not using SSO.

I’m having problems with logging in, what should I do?

Contact Pigment Support and provide as many details as possible, including the number of affected Members, their email addresses, and any relevant error screenshots.