Profiles & Enrollment
      Back to home
      1. Help Center
      2. Admin Portal
      3. Profiles & Enrollment

      Adaptive Two-Factor Authentication (2FA) for Facial Authentication

      Authenticate based only on your biometric profile on Alcatraz devices running in 2FA mode

      Adaptive Two-Factor Authentication (Adaptive 2FA) allows selected people to authenticate based only on their biometric profile on Alcatraz devices running in 2FA mode.
      To allow a person to use Adaptive 2FA, you need to add the person's badge ID to the Adaptive 2FA list.
      After you make and save the Adaptive 2FA setup, it applies on all Alcatraz Facial Authentication Devices connected to Alcatraz Admin Portal.

      This article relates to the 2FA mode on Alcatraz Facial Authentication Devices. To learn about 2FA for Alcatraz Admin Portal users, see Two-Factor Authentication in Alcatraz Admin Portal.

      Creating a 2FA Exception for a Person

      To make your Alcatraz facial authentication devices authenticate a person in Face-Only (1FAF) mode while running in Face and Badge (2FA) mode, you need to add the person's badge ID to the Adaptive 2FA list.
      To enable Adaptive 2FA for a person who owns multiple badges, it is enough to add any one badge as an exception. The badge must be assigned to the same person in your Access Control System (ACS) or in Alcatraz Admin Portal before you add it as an exception.

      Alcatraz Admin Portal propagates Adaptive 2FA settings to Alcatraz Facial Authentication Devices immediately. However, slight delays are possible depending on what other data it is propagating at the same time and the network load.

      The following roles can add badge IDs to the Adaptive 2FA list:
      • Account Administrator
      • Account Manager
      Take these steps to add a badge ID as an exception:
      1. Log in to Alcatraz Admin Portal as a supported role.
      2. In the left menu, go to Profiles.
      3. From the drop-down menu on the right, select Adaptive 2FA.
        p-adaptive2fa-menu

      4. Click Actions and then Add to Adaptive 2FA.
        p-adaptive2fa-add
      5. Under Add Badge Data, specify the Card Format, Facility Code, and Badge Number of the badge to exclude.
      6. Click Save.
      The badge ID appears on the list. All owners of badge IDs on the list use Face-Only (1FAF) authentication only.

      Removing a Person from the 2FA Exception List

      To reinstate 2FA on a person, remove their badge ID from the Adaptive 2FA list.
      The following roles can remove badge IDs from the Adaptive 2FA list:
      • Account Administrator
      • Account Manager
      1. Take these steps to remove a person's badge ID from the list:
      2. Log in to Alcatraz Admin Portal as a supported role.
      3. In the left menu, go to Profiles.
      4. From the drop-down menu on the right, select Adaptive 2FA.
      5. In the list, find the badge ID to remove and then click the trash-bin icon in the Actions column.
        p-adaptive2fa-remove
      6. In the dialog box that opens, click Yes, delete to confirm the removal.
      You can also remove multiple entries from the list by following these steps:
      • In the list, check the first-column box in the rows that you want to remove.
      • Click Actions > Delete.
      • In the dialog box that opens, click Yes, delete to confirm the removal.