Admins can manage multi-factor authentication (MFA) requirements across their entire firm. This includes selecting a default MFA method for both internal team members and external client portal users. You can also reset login access for individual team members if needed.
🧾 Required Plan, License, and Permissions
Admin-level access to Settings > Security
Applicable to firms using Canopy clients using the Client Portal
💡 Why does this matter to an accountant or admin?
Firm-wide MFA ensures secure access for both your internal team and clients. It protects sensitive tax and financial data and simplifies compliance with security best practices.
📚 Table of Contents
🔧 Set MFA defaults for team members and clients
Click your profile icon in the global navigation bar.
Select Settings > Security.
Under Multi-factor Authentication, choose a method for team members.
Choose a method for client portal users.
Click Update MFA Settings to save your changes.
🔁 Reset MFA logins for team members
If a team member is having trouble accessing their account or needs to reconfigure MFA:
From the Security settings page, click Manage MFA Logins.
Select one or more team members from the list.
Click the Reset Login arrow.
This will trigger a reset of their MFA setup, allowing them to log in and reauthenticate.
Click the X in the upper-right corner to close the pop-up window.
🛡️ How do I turn on permission settings for other team members to manage MFA settings?
To allow other team members to manage MFA login resets, admins must enable the related permission within their permission set.
Click your profile icon in the global navigation bar.
Go to Settings > Access and Permissions.
Click the permission set you want to update.
Scroll to the Settings section.
Toggle Security Settings to on.
Click Done to save your changes.
🔎 Tip: Not all users need access to MFA management. Only enable this setting for trusted roles who oversee team onboarding or IT support.
🧩 Troubleshooting
Team member didn't receive a reset prompt
After clicking Reset Login, team members should be prompted to set up MFA the next time they log in.
If they don’t see a prompt:
Clear browser cookies and cache
Confirm they’re using the Canopy web app (not a cached bookmark)
Check that their email is correct in their user profile
Can’t update MFA settings
Only users with admin access can change MFA settings.
If the Update MFA Settings button is unavailable, verify your permission level.
Client wasn't prompted for MFA
Clients will be prompted to set up MFA only during new logins after the setting is applied.
Ask the client to log out and sign back in.
If the prompt still doesn’t appear:
Confirm they have client portal access
Double-check the email they’re using to log in
✅ Summary
Canopy’s firm-wide MFA settings give admins centralized control over how team members and clients authenticate. You can enforce consistent security protocols, delegate access where needed, and resolve login issues quickly.
🆘 Need help?
Contact Support or ask Penny, our AI Support Bot, for assistance.