I’m all for tightened security, but requiring MFA at least every 12 hours for EpicCare seems excessive.
I’ve never had to use MFA this frequent. Not even my bank is this strict.
Maaaybe dial it back a bit, Epicor?
8 Likes
1 Like
I am too but it’s a bit much. Especially if you have MFA on your Epicor IDP account. You get double MFA when logging into EpicCare. I sent feedback to the EpicCare team but they weren’t open to any feedback.
5 Likes
I already put in an idea on 9/11 but not sure if it’s available yet. Log In - Epicor Identity
5 Likes
2 Likes
It’s not. I also have an idea in for changing it.
1 Like
Agree. Its ridiculous and painful. Honestly makes me think twice about updating my cases. Working as designed maybe?
5 Likes
Right? It’s impossible to log in with MFA that often.
2 Likes
Annoying a f*** but not impossible.
I just reply to the email. No MFA to do that! Now creating a case… 
1 Like
I mean I feel like we can request some pretty wild stuff through Epiccare if our accounts go compromised, i.e. “hey can you restore my live database back to 09/01/2025?” or something else pretty damaging. I was trying to come up with things in my head to make me feel fine about this level of prompting.
3 Likes
Even my bank lets me “remember” this computer. My MFA isn’t limited to a single browser session. Even if you pick the 12 hours, if you close your browser, you have to MFA all over again. I can’t think of a single website I interact with on a regular basis that requires that frequency of authentication.
2 Likes
I was wondering if anybody else was going through this. Such a pain.
1 Like
That’s what I thought as well. Someone must have been burned to go from no MFA to this.
3 Likes
Seems like they could give you some level of choice
1 Like
My password manager…both on the app and online. 
Banks are awful…but getting better.
1 Like
Mine too. But I expect to do MFA that often my password manager.
With MFA on my Epicor IDP there’s no security advantage to having a second MFA prompt just for EpicCare.
3 Likes
You are right
Believe it or not, Tangerine bank in Canada only just added support for 32 character passwords. Before that, you could only set a 6 digit pin to login to online banking.
6 Likes
I got locked out of my Samsung S21 because on an OS update it truncated my password 
5 Likes
And I know people who use BMO.
3 Likes
Most still only support SMS for MFA
4 Likes