Documentation forAccess Rights Manager

Set up and sign in with multi-factor authentication (web client)

If your ARM administrator enabled multi-factor authentication (MFA) for your account, you must enter a 6-digit code from an authenticator app when you sign in to the ARM web client.

Before you begin, install a TOTP authenticator app on your mobile device, such as Microsoft Authenticator, Google Authenticator, Authy, or Duo Mobile.

Set up MFA the first time you sign in

After MFA is enabled for your account, you are asked to set up your authenticator app the next time you sign in to the web client.

  1. Sign in to the web client with your user name and password.

    A page with a QR code and a secret key is displayed.

  2. In your authenticator app, add a new account and scan the QR code.

    If you cannot scan the QR code, enter the secret key in the authenticator app manually.

    The app adds an account with your company name and starts generating 6-digit codes.

  3. Enter the 6-digit code displayed in the authenticator app and click Next.

    When the code is verified, you are signed in to the web client.

If you are an ARM administrator, you can skip the MFA setup. Users without an Administrator role must complete the setup to sign in.

If the QR code expires or the code is rejected

  • The QR code expires after 5 minutes by default. If it expires before you finish the setup, sign in again to display a new QR code.

  • After 3 failed attempts to enter a valid code, you return to the sign-in page and must sign in again.

  • Codes change every 30 seconds. If a code is rejected, wait for the next code and enter it. If codes are rejected repeatedly, make sure the date and time on your mobile device are set automatically.

Changing the default QR code expiry time

By default, the QR code expires after 5 minutes. An administrator can change this by editing the TotpSetupExpiryMinutes value in the WebApi8Man configuration on the ARM web server.

  1. On the ARM web server, open appsettings.json in the WebApi8Man installation folder (typically ...\SolarWinds\ARM\GrantMA\).

  2. Locate the "TotpSetupExpiryMinutes": 5 setting.

  3. Change the value to the desired number of minutes.

  4. Save the file and restart the IIS site / WebApi8Man application pool for the change to take effect.

Sign in with MFA

After you set up MFA, sign in to the web client as follows:

  1. Sign in to the web client with your user name and password.

  2. Open your authenticator app, and enter the current 6-digit code for ARM.

If you lose your device

If you lose or replace the device with your authenticator app, you or an administrator can reset MFA for your account. After the reset, you will need to set up your authenticator app again when you first sign in. See Reset MFA for a user for further instructions.