Guide to Setting Up Mail Tokens for Two-Factor Authentication

Protectimus MAIL tokens deliver one-time passwords (OTPs) to users via email. This method is free and easy to deploy because most users already have access to their email accounts.

This guide explains how administrators can configure Protectimus so users can enroll their own Protectimus MAIL tokens through the Protectimus Self-Service Portal.

Before you begin:

• Create a Resource in the Protectimus system.
• Add users and make sure each user has either a password or a registered email address.
• Enable the Self-Service Portal for the Resource.

Detailed instructions are available in the following guides:

• Resources Management Guide
• User Management Guide
• User Self-Service Portal Setup Guide

How to Enroll a Protectimus MAIL Token via the Self-Service Portal

1. Log in to the Protectimus SaaS Service.
2. Open the Resources page and select the required Resource.
3. Enable Enroll Token in the Allowed Actions section.
4. Allow MAIL token enrollment in the Token Enrollment tab.
5. Provide users with the Self-Service Portal link.
6. Users log in to the portal and click Assign New.
7. Select MAIL, configure the token, and confirm the email address.
8. The MAIL token will appear in the 2nd Factor section after activation.

1. Enable MAIL Token Enrollment in the Self-Service Portal

1. Log in to your Protectimus SaaS Service account.
2. Open the Resources page and select the required Resource.

3. Open the Self-Service tab.

4. In the Allowed Actions section, enable Enroll Token.

5. Open the Token Enrollment tab.
6. Enable MAIL as an available token type.
7. Click Save.

2. Provide Users with Access to the Self-Service Portal

To access the Self-Service Portal, users need:

• The Self-Service Page Address generated in the Resource settings.
• Their username and either a password or a registered email address.

Send the Self-Service Portal link to your users and ask them to enroll their tokens. Also inform users which username and password or email they should use to log in to the Protectimus Self-Service Portal.

3. User Guide: How to Enroll a Protectimus MAIL Token

1. Open the Self-Service Portal using the link provided by your administrator.
2. Log in using your username and password or email verification.
3. In the 2nd Factor section, click Assign New.

4. In the Add Token window, select MAIL.
5. Enter the Name of the token.
6. Enter your Email Address where OTP codes will be delivered.
7. Select the desired OTP Length.
8. Click Save.

9. A one-time password will be sent to the specified email address.
10. Enter the received OTP to confirm activation.

11. After successful activation, the MAIL token will appear in the 2nd Factor section.

If you have any questions, please contact Protectimus customer support service.