EpiCare MFA

Kinetic ERP
21

Should have never posted anything about it. I have two active cases right now and I have to MFA every single time even though I click the 12 hour checkbox…

1 Like
22

I just end up only replying via email.

2 Likes
23

Came here to say this :index_pointing_up:t2:

I’m more bothered by the double MFA I have now, and my Bitwarden plug-in trying to figure out which one it should be supplying when!

2 Likes
24

tenor(1)

6 Likes
25

Don’t remind me

27

We just opt’d out of MFA. Now, no more MFA for EpicCare.

It was too burdensome for our staff, as we don’t distribute company phones.

5 Likes
28

I contacted support and asked them to drop the MFA prompt. I mentioned that we are already linked to Epicor Idp with Entra ID with MFA enabled as an external provider.

I marked all of our users in the login.epicor.com portal as two factor enabled and the support representative “enforced MFA with IDP” across our tenant. Now we have no more EpiCare MFA prompt!

7 Likes
29

What?! We are all MFA via IDP too. Off to submit a ticket!

1 Like
30

It’s also very buggy and fails way too often.

2 Likes
31

Would this disable basic auth then? We have a few users who require it so I am not sure this would work for us but really cool eitherway!

1 Like
32

From my support case

To eliminate the double MFA, it is essential to make MFA mandatory on the IDP. All your EpicCare users must use their “Epicor Identity” to log into EpicCare.

1 Like
33

I hate this. I actively avoid reporting issues because of it.

34

Michael, can you clarify what specifically we should be asking the support reps to do? We also have IdP + AAD w MFA and whatever I asked has them acting like I’m asking to shut off MFA across everything and to talk to my CAM and sign paperwork etc, etc.

I did mark myself as two factor enabled in IdP and it did seem to change Epicare MFA - sometimes. So I’ll do the same on all users, but then what?

35

This is exactly what I asked:

Hello,
We already have MFA with our linked Idp. Could you please remove the 12 hour MFA requirement for our tenant so we don’t need to perform MFA twice every time we need to update case details?

This would help us get information to Epicare on a timely basis.

Thank you in advance

3 Likes