Logging in as a First Time User with Multifactor Authentication

For organizations that have Multifactor Authentication (MFA) enabled, the following process is used to validate the identity of the first-time users attempting to log in to IAM.

1. On the Sign In page, click the First Time User link.

2. When prompted, enter the User ID received in your Welcome email and then click Submit.

3. Click OK on the Email Sent notification message. You will be redirected to the IAM Sign In page.

4. Check the email address associated with your IAM user account. You will receive an email message containing a security code. The security code is valid for 15 minutes.
5. Click the Create Your Profile link.

6. On the Security Code page, enter the security code provided in the email and then click Submit.
7. On the Set New Password page, enter and confirm your new password. The default password requirements set by Dayforce are that the password:
   1. Must be a minimum of 7 characters
   2. Must contain at least 3 of the following:
      1. Numbers
      2. Capital letters
      3. Lower-case letters
      4. Special characters including [~`!@#$%^&*()+=|\{}':;.,<>/?[\]""_-]
   3. Is case-sensitive
8. Click Save and Proceed.

9. On the Secret Questions page, select a question in each of the question fields.
   You may not use the same question more than once. On the right side, enter your answer to each question. The answers you enter are masked for security purposes so use caution when entering your responses to avoid typos, misspellings, etc., that could prevent you from responding to the security question prompts at a later time.
10. Click Save and Proceed.

11. On the Set Up Multifactor Authentication page, select the authentication method you would like to use.
    In our example we show you how to set up the Smartphone App (Authy) which, once set up, enables you to verify your identity on your phone with just a tap. Alternatively, you can opt to have a text message, or an automated call sent to your phone with a verification code that must be entered to verify your identity.
12. Click Next.

13. In the Primary Phone Number field, select the country code from the drop-down list.
14. In the next text box, enter the telephone number with no dashes or spaces.
15. In the Exten text box, enter an extension if needed.
16. If you want to include a secondary phone number, select the Include Secondary Phone Number option and enter the secondary phone number.
17. Click Next.

18. To verify the phone number that you entered, a one-time code must be sent to the phone number you entered. Select how you would like to receive that code:
    1. Text Message – a text message is sent your phone
    2. Voice Call – a phone call is placed to your phone and an automated voice provides the code

19. On the next page, enter the code that you received. If you did not receive the code, click Resend code to resend the code to the same number. Additionally, you can change the method of receiving the code by clicking the link below Resend code. In our example, we chose to receive the code by text message, so the link shown provides the option to Receive a code by voice call instead.

20. Install the Twilio Authy app from the Apple App Store or the Google Play store and set up an account using the phone number you verified.
21. Once you have installed the Authy app, click Next.

• In the Authy app on your phone, you will receive a security token. The security token is valid only for 20 seconds before a new key is generated.

22. On the Multifactor Authentication page, enter the security token in the text box. You must enter the security token shown in the Authy app and click Next before the token expires.

23. Click Continue.

This completes the setup of MFA. Users are directed to the IAM Home page or the landing page of the partner application.