Multi-Factor Authentication

At Supply2Gov we pride ourselves on ensuring our platform is simple, smart and secure and we are pleased to announce that we are taking security to the next level and introducing multi-factor authentication.

What does multi-factor authentication mean?

You may already be familiar with multi-factor authentication (MFA) as it is commonly practiced by various online service portals such as online banking. It is essentially a process that requires the user to enter more than one piece of information to access their account. For example, in addition to entering a password you may also be asked to enter a code that has been sent to your mobile device or email account.

In the case of Supply2Gov, our MFA process will involve users logging in with their current user name and password and carrying out the second authentication step using either Google or Microsoft’s multi-factor authentication app. Please be advised that it will be your responsibility to download and set up the Google or Microsoft authenticator application on either their work or personal mobile devices. Rest assured that this is very easy to do and both Google and Microsoft provide helpful setup and user guides.

Why is Supply2Gov implementing MFA?

In the first instance, implementing MFA is good practice and, as mentioned, very commonplace but the main reason for adding MFA to the Supply2Gov platform is security and to ensure that Supply2Gov continues to be compliant in line with current guidance from the National Cyber Security Centre. For more information and advice from the NCSC on implementing MFA, please visit https://www.ncsc.gov.uk/guidance/multi-factor-authentication-online-services.

How does this impact Supply2Gov users?

We are planning that this will cause very little disruption for our users. As we are implementing an additional step using the authenticator app, all Supply2Gov users will need to download either the Google or Microsoft authenticator apps to their devices. These can be downloaded for free from most app stores such as Apple or Google Play store.

There will also be a short period when the platform will be down for maintenance whilst we deploy the updates, but this will be carried out outside office hours.

When will MFA go live?

Multi-factor authentication will be launched by the beginning of April and, to ensure that all users are informed and prepared, we will be communicating regularly in the lead-up to the date of deployment.

Further information will added to this page in due course and will be emailed to all Supply2Gov users but if you have any questions please feel free to contact our Helpdesk team at info@supply2govtenders.co.uk

What to expect the first time you log in

Below is a step-by-step guide on what to expect when you log in to Supply2Gov after MFA has gone live. In preparation for this, we recommend you download either Google or Microsoft’s authenticator app on your device as this will save time later on.

Step 1:

When you first visit the Supply2Gov login, the first screen will look exactly the same. Simply enter your usual username and password.

Step 2:

Next you will need to set up the authenticator app. Please note that you will need to download either the Google or Microsoft authenticator app on to your device in advance.

Scan the QR code on the screen using the authenticator app and you will be shown a token code for the next step.

Step 3:

Enter the token code from your authenticator app and then click ‘Register’.

Step 4:

Next you will be shown a one-time passcode on your authenticator app. Please enter that into the box shown on screen and click ‘Login’.

Step 5:

In order to reduce the frequency of login verification, you can opt to trust the browser that you are logging in from. If you choose to set this up, simply name the device and choose how long you would like to remember the browser. The options are 30, 60 or 90 days. Then click ‘Register’. You can also choose to skip this step and set up at a later date.

Step 6:

You will now be logged in to the Supply2Gov platform and can continue to use it as needed. The next time you log in to Supply2Gov you will use your username and password as before but will then be asked to enter a one-time passcode from the authenticator app. This is MFA. Simply open your authenticator app and enter the passcode shown. Please note that the passcode refreshes every 30 seconds.