IMPORTANT: Key Enhancements Deploying October 10th

IMPORTANT

Key Enhancements Deploying NEXT WEEK (October 10^th)

Enhanced System Security – Move Secrets to AWS

We have implemented additional security measures by moving sensitive system information to a more secure AWS environment. This update affects several areas of the GeoCivix system.

Although these changes have been thoroughly tested, certain client-specific configurations or custom processes may be affected. If you notice anything that is not working as expected following this deployment next weekend (October 10^th), please notify GeoCivix Support right away so our team can investigate.

Two-Factor Authentication and New Login Experience

We will be introducing two-factor authentication (2FA), along with a redesigned login experience. The updated login window will be the most visible change and will affect everyone who signs in to GeoCivix.

Clients can customize the image, but they are responsible for providing the image and ensuring it is in an orientation that works on multiple screen sizes. The setting is in the site configuration

Clients/Implementation can change the background color behind their logo

The two-factor authentication for clients will be non-visible unless it is turned on in site configuration under the Two-Factor Authentication section.

• 
  
  • Optional means users can set up 2FA themselves by logging in, going to My Account then the Security section
  • Required for Staff means internal users (not applicants) must use 2FA
  • Required for Everyone means anyone who uses their portal will have to set up 2FA

If left optional, they can choose what user groups have to set up 2FA, such as just Site Administrators

The trusted devices option is a client preference on whether users can choose to remember the browser. It will remember a 2FA for 30 days saving them a login step.

Two-factor can be done using an authenticator app (recommended to allow use across devices and multiple browsers) such as Google Authenticator or Microsoft Authenticator, a pass key (done via the OS and Browser), email or SMS. They may choose to set up multiple methods as backups. For example, they can set the Passkey as their primary but authenticator app as backup

0 Votes