Shortcuts: Why 2FA? | What is 2FA?
As of October 18, 2023, all users who employ basic authentication (entering an SAP Concur username and password) when signing in at www.concursolutions.com on web or on the mobile app will be required to set up two-factor authentication (2FA) at the time of their next sign in.
Important: If your company uses Single Sign On to access SAP Concur, 2FA setup will not be required. The following details will not apply to you.
The links below are resources to help you get 2FA set up and signed in.
Two-Factor Setup Guide for End Users
2FA FAQs
Signing In to SAP Concur Desktop With 2FA Demo Video
Signing In to SAP Concur Mobile (iPhone Demo Video)
Signing In to SAP Concur Mobile (Android Demo Video)
Why 2FA?
Here at SAP Concur, we are committed to providing a secure and trustworthy platform for all our users.
In today's digital landscape, security is of utmost concern, and we are committed to safeguarding your sensitive information and personal data. Two-Factor Authentication is a robust and proven method that significantly enhances the security of your accounts. Reputations are valuable assets, and if a security incident happens, it can tarnish an image in the eyes of customers, partners, and the general public. We know that your confidence in our ability to safeguard your data is crucial. We want to reassure you that we are investing in stronger security measures and continuously monitoring and improving our systems by bring 2FA to your accounts. There are more than 24 billion usernames and passwords on the dark web as of June 2022. Hackers are getting smarter every day and username/passwords are vulnerable to risk of unauthorized access, brute force attacks, various cyber threats, such as phishing, credential stuffing, password breaches and can be stolen by third parties. Enforcing the use of a 2FA significantly reduces the risk of unauthorized access and increases confidence that your accounts will stay safe from cyber criminals.
What is 2FA?
2FA is a layered approach to securing your users accounts and the data they contain. When 2FA is enabled, after entering the correct password, the user is prompted to provide the second factor of authentication, which could be a one-time code generated by a mobile authenticator app. This second step verifies the user’s identity before the service grants the user access. 2FA greatly enhances the security of online accounts and is a core component of a strong identity and access management policy. While important, usernames and passwords are vulnerable to credential stuffing, password breaches and can be stolen by third parties. Enforcing the use of an 2FA significantly reduces the risk of unauthorized access and increases confidence that your accounts will stay safe from cyber criminals. Two-factor authentication (2FA) is safer than basic authentication (usually just a username and password) because it adds an extra layer of security to the login process. Basic authentication relies solely on something the user knows (the password), while 2FA requires more than that ( a second factor) for authentication.
