> ## Documentation Index
> Fetch the complete documentation index at: https://koreai.mintlify.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-Factor Authentication

<Badge icon="arrow-left" color="gray">[Back to Admin Console](/ai-for-service/administration/overview)</Badge>

Two-Factor Authentication (2FA) adds an extra layer of security to enterprise user accounts using a One-Time Password (OTP) sent via email. After entering a username and password, the platform prompts users to verify via a time-limited email code.

<Note>SSO and 2FA are mutually exclusive. Enabling Enterprise SSO automatically disables 2FA for that account, and vice versa.</Note>

***

## Enable 2FA (Admin)

Only an admin user can enable 2FA for the account.

1. Log in to the **Admin Console**.

2. In the left menu, select **2FA** under **Security & Control**.

   <img src="https://mintcdn.com/koreai/mKxGC8UPdZt2RNJG/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img1.png?fit=max&auto=format&n=mKxGC8UPdZt2RNJG&q=85&s=9f0cacb00bd1091382226694f570d0b3" alt="Security & Control - 2FA" width="220" height="424" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img1.png" />

3. Select **Enable 2FA**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img2.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=58e91e0013ae3c8662657e69873d876f" alt="Enable 2FA" width="624" height="186" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img2.png" />

4. Select **Save**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img3.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=b54571ca5ff9663f4ba46e9d4940e05e" alt="2FA Save" width="624" height="277" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img3.png" />

**OTP behavior:**

* Each OTP is valid for a single login session only.
* Default OTP validity: 10 minutes.
* Reusing, entering incorrectly, or entering after expiry results in a failed authentication error.

***

## Grant 2FA Permission to a Custom Admin

For a custom admin role to enable 2FA, the Master Admin must grant the permission.

1. Go to **Admin Console > User Management > Role Management**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img4.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=2ba125abc3c15fcb9881e373206a0a91" alt="Role Management" width="658" height="340" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img4.png" />

2. Select the **Edit** icon for the desired admin role.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img5.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=203a77d6dea9957df8612e8da00d2de6" alt="Edit Role" width="614" height="374" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img5.png" />

3. Select the **Permissions** tab.

4. Set **Two-Factor Authentication** to **YES**.

5. Select **Save**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img6.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=f3afb616477396ae80164886988c3fad" alt="Save 2FA Permission" width="584" height="759" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img6.png" />

***

## Admin Login with 2FA

1. Go to the **Admin Console** and enter your email ID. Select **Continue**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img7.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=3281d672b9a40f7b000fb74c19ed2b75" alt="Enter Email" width="388" height="248" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img7.png" />

2. Enter your password and select **Log in**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img8.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=a256ec0f02ea22335706faac4cdf1427" alt="Enter Password" width="467" height="283" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img8.png" />

3. Enter the OTP received at your registered email address.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img9.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=ba7cbe3182cf5b8565320ffe858dbc79" alt="Enter OTP" width="372" height="386" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img9.png" />

4. On successful verification, a success message appears and you are redirected to the dashboard.

   <img src="https://mintcdn.com/koreai/mKxGC8UPdZt2RNJG/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img10.png?fit=max&auto=format&n=mKxGC8UPdZt2RNJG&q=85&s=fca415733d5c8480d254e2aa12ac9441" alt="Verification Successful" width="313" height="386" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img10.png" />

***

## End-User Login with 2FA

1. Go to the **App Builder Platform** and enter your email ID. Select **Continue**.

   <img src="https://mintcdn.com/koreai/mKxGC8UPdZt2RNJG/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img11.png?fit=max&auto=format&n=mKxGC8UPdZt2RNJG&q=85&s=34bfbb167cc78a0b0de1d624c3e26f38" alt="Bot Builder Email" width="611" height="289" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img11.png" />

2. Enter your password and select **Login**.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img12.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=4c90a4476fa1ea5529d3dbfc87002b81" alt="Bot Builder Password" width="249" height="341" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img12.png" />

3. Select your AI Agent account when prompted.

   <Note>2FA is not prompted again if you already completed it for another account in the same session.</Note>

4. Enter the OTP verification code received via email. Select **Resend Code** if needed.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img13.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=e8ec55b4ecb36d6f423ae5b4770c6332" alt="Enter OTP" width="341" height="417" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img13.png" />

5. On success, you are redirected to your dashboard.

   <img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img14.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=1e951bde8f2c8468ebd1cd77f21ae967" alt="Verification Success" width="610" height="394" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img14.png" />

***

## Switch Accounts During 2FA

Use **Switch to Different Account** on the verification screen to switch accounts without entering the current OTP.

<img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img15.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=2d1acd8f0f1ead0a5126400d9683e254" alt="Switch Account" width="379" height="400" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img15.png" />

<Note>This option is only available to users with multiple accounts.</Note>

You are redirected to the account selection page.

<img src="https://mintcdn.com/koreai/cPgRjyYQym6Lo6yz/ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img16.png?fit=max&auto=format&n=cPgRjyYQym6Lo6yz&q=85&s=2c858709d7eaf1415e0f9e423d1f73bc" alt="Account Selection" width="541" height="400" data-path="ai-for-service/administration/security-and-control/images/two-factor-authentication-for-platform-access-img16.png" />

**Important considerations for account switching:**

* A new passcode is sent via email for the switched account.
* Passcode expiry time: 2 minutes.
* If you switch within 2 minutes or after, a new passcode is generated for any unauthenticated account.
* If the previous account was already authenticated in the same session, no new code is required.
* Entering an incorrect passcode blocks access. Select **Resend Code** to generate a new one.
