MFA Login Process

1 min read

How multi-factor authentication works when signing in to FranConnect, and how administrators set it up

Overview

When Multi-Factor Authentication (MFA) is turned on for your FranConnect site, entering a username and password is not enough to sign in. After the password, FranConnect emails the user a one-time verification code, and the user must enter that code on the login page to finish signing in.

This article explains what users see when they sign in with MFA, how the Remember option works, how administrators turn MFA on and manage remembered devices, and what to do if verification emails do not arrive.

1. Signing In With MFA

1. Go to your FranConnect login page and enter your Login ID and Password, then click LOG IN.

2. FranConnect sends an email containing a one-time verification code to the email address on your user profile.

3. Open the email and copy the code. The subject line reads OTP for Multifactor Authentication of followed by your company name and Franchise Management System.

4. Enter the code on the FranConnect login page before it expires. The time allowed is set by your administrator in OTP Duration (minutes).

5. Optionally, select Remember so you are not asked for a code again when you sign in from the same network (see Section 2).

6. Complete the verification to open FranConnect.

Note: The verification code is sent to the email address saved on your user profile. If that address is wrong or out of date, ask your administrator to correct it before you sign in.

2. The Remember Option

The Remember option lets a user skip the verification code on later sign-ins. It works only if your administrator has set Remember User’s Device as per Network Configuration to Yes.

Question	Answer
What does it remember?	The user and the network they sign in from, not the physical device.
Does it expire?	No. It does not have an expiration period.
Is the password still required?	Yes. The user still enters their password on every sign-in.
What if the user signs in from a different network?	A verification code is requested again.
Can users forget a remembered device themselves?	No. An administrator must clear remembered devices (see Section 4).

3. Turning On MFA (Administrators)

1. Go to Admin > Configuration > Configure Password Settings.

2. Scroll to MULTI-FACTOR AUTHENTICATION SETTINGS and set Multi-Factor Authentication to Yes. Additional MFA settings appear below it.

3. Review the settings described in the table below.

4. Click Save.

MFA settings section with Multi-Factor Authentication set to No

Additional MFA settings that appear after selecting Yes

Setting	What it does
Multi-Factor Authentication	Turns MFA on or off for the site. MFA does not apply to the Outlook and Gmail plugins.
No. of invalid attempts	Number of invalid attempts allowed during MFA verification.
Lock time period (minutes)	How long a user is locked out after exceeding the invalid attempts.
OTP Duration (minutes)	How long a verification code stays valid after it is sent.
FDD And Candidate Portals Multi-Factor Authentication	Applies MFA to the FDD and Candidate portals.
Remember User’s Device as per Network Configuration	Shows the Remember option on the verification step and skips the code on later sign-ins from the same network.

Important: MFA applies to every user who signs in to the site. Make sure each user’s profile has a working email address before you turn it on.

4. Clearing Remembered Devices (Administrators)

Users cannot remove a remembered device themselves. To clear remembered network information for all users:

1. Go to Admin > Configuration > Configure Password Settings.

2. Set Remember User’s Device as per Network Configuration to No.

3. Click Save. All remembered devices are cleared.

4. To keep using the option, set it back to Yes and click Save again.

To clear remembered devices for only one user, for example after a lost device, contact FranConnect Support with that user’s details.

5. Verification Emails Not Arriving

Verification code emails are sent from your site’s default sender address. Because email filters may treat automated messages as spam or place them in quarantine, we recommend completing the following steps before enabling MFA for your users:

• Add your site’s sender address to their safe senders or allowed senders list.

• Have IT allow the sender address, or the subject line, in the company mail gateway.

• Users who sign in with a personal or non-company email address should add the sender to their contacts or safe senders list as well.

Problem	What to check
No code arrives	Check junk, spam and quarantine folders; confirm the email on the user profile is correct; confirm the sender is allowed.
The code does not work	The code may have expired. Sign in again to receive a new one, and enter it within the OTP Duration (minutes) set by your administrator.
No code arrives on a test (UAT) site	Test sites deliver email only to an approved recipient list. Contact FranConnect Support to add the tester’s email address.

MFA Login Process

Daniel Diaz

Updated November 09, 2026 12:46

How multi-factor authentication works when signing in to FranConnect, and how administrators set it up

Overview

1. Signing In With MFA

1. Go to your FranConnect login page and enter your Login ID and Password, then click LOG IN.

2. FranConnect sends an email containing a one-time verification code to the email address on your user profile.

3. Open the email and copy the code. The subject line reads OTP for Multifactor Authentication of followed by your company name and Franchise Management System.

4. Enter the code on the FranConnect login page before it expires. The time allowed is set by your administrator in OTP Duration (minutes).

5. Optionally, select Remember so you are not asked for a code again when you sign in from the same network (see Section 2).

6. Complete the verification to open FranConnect.

Note: The verification code is sent to the email address saved on your user profile. If that address is wrong or out of date, ask your administrator to correct it before you sign in.

2. The Remember Option

The Remember option lets a user skip the verification code on later sign-ins. It works only if your administrator has set Remember User’s Device as per Network Configuration to Yes.

Question	Answer
What does it remember?	The user and the network they sign in from, not the physical device.
Does it expire?	No. It does not have an expiration period.
Is the password still required?	Yes. The user still enters their password on every sign-in.
What if the user signs in from a different network?	A verification code is requested again.
Can users forget a remembered device themselves?	No. An administrator must clear remembered devices (see Section 4).

3. Turning On MFA (Administrators)

1. Go to Admin > Configuration > Configure Password Settings.

2. Scroll to MULTI-FACTOR AUTHENTICATION SETTINGS and set Multi-Factor Authentication to Yes. Additional MFA settings appear below it.

3. Review the settings described in the table below.

4. Click Save.

MFA settings section with Multi-Factor Authentication set to No

Additional MFA settings that appear after selecting Yes

Setting	What it does
Multi-Factor Authentication	Turns MFA on or off for the site. MFA does not apply to the Outlook and Gmail plugins.
No. of invalid attempts	Number of invalid attempts allowed during MFA verification.
Lock time period (minutes)	How long a user is locked out after exceeding the invalid attempts.
OTP Duration (minutes)	How long a verification code stays valid after it is sent.
FDD And Candidate Portals Multi-Factor Authentication	Applies MFA to the FDD and Candidate portals.
Remember User’s Device as per Network Configuration	Shows the Remember option on the verification step and skips the code on later sign-ins from the same network.

Important: MFA applies to every user who signs in to the site. Make sure each user’s profile has a working email address before you turn it on.

4. Clearing Remembered Devices (Administrators)

Users cannot remove a remembered device themselves. To clear remembered network information for all users:

1. Go to Admin > Configuration > Configure Password Settings.

2. Set Remember User’s Device as per Network Configuration to No.

3. Click Save. All remembered devices are cleared.

4. To keep using the option, set it back to Yes and click Save again.

To clear remembered devices for only one user, for example after a lost device, contact FranConnect Support with that user’s details.

5. Verification Emails Not Arriving

• Add your site’s sender address to their safe senders or allowed senders list.

• Have IT allow the sender address, or the subject line, in the company mail gateway.

• Users who sign in with a personal or non-company email address should add the sender to their contacts or safe senders list as well.

Problem	What to check
No code arrives	Check junk, spam and quarantine folders; confirm the email on the user profile is correct; confirm the sender is allowed.
The code does not work	The code may have expired. Sign in again to receive a new one, and enter it within the OTP Duration (minutes) set by your administrator.
No code arrives on a test (UAT) site	Test sites deliver email only to an approved recipient list. Contact FranConnect Support to add the tester’s email address.

Articles in this section