2FA (employee)

It is possible to enable two-factor authentication (2FA) on client machines when various events occur.
You have to select a 2FA method and one or more events.

Method: IMEI code of the smartphone
This method does not use a server call and works only within the client machine.
The user will be asked to enter the IMEI code of the phone, and then use parts of this IMEI code as OTP codes.
This method has low reliability, but is quite simple and does not require access to the server or installation of any additional apps on smartphones.

Method : SMS/e-mail/Telegram
These methods use a call to the server, then server initiates the sending of OTP codes via the selected channel.
It is important to make preliminary settings on the corresponding pages: e-mail, SMS, Telegram

Enable at LogOn
The OTP code will be requested each time the user logs into the system.

Enable when unlock or run as administrator
The OTP code will be requested each time user unlocks the screen or after running a program that requires administrator rights.

Enable when critical application/site starts
The OTP code will be requested immediately after each launch of a critical application or website. See settings here.

Turn on periodically
The OTP code will be requested periodically with the specified period in minutes.


First start: when 2FA is first activated on a client machine, the user will be prompted to enter initial information about the code delivery channel, and on subsequent launches, the 2FA code request itself will be performed!

Attention! For emergency screen unlock and reset of user 2FA settings, you need to use the function in BOSS-Online "Admin functions (user)" - "Reset 2FA"

Attention! 2FA will not work in Safe Mode!

Important! It is not recommended to experiment with 2FA in the case where the client and server are installed on the same machine, as there may be a potential problem with unlocking the screen due to incorrect settings or the inability to receive an OTP code!