Skip to content
Submit a Ticket
  • There are no suggestions because the search field is empty.

Security Settings

In Security Settings, you can enable MFA with SMS codes, enforce authentication via Microsoft, and decide whether reports should be sent to Administrators and Group Auditors who have not yet signed in or verified their Nimblr account.

What are Security Settings in Nimblr?

Security Settings in Nimblr let administrators control how all portal admins sign in. There are three available options: enforce Microsoft-only authentication, require SMS-based multi-factor authentication (MFA), or allow email reports to be sent to unverified administrators. To access these settings, go to your Nimblr Admin Portal and navigate to Settings > Security.

nimblr_securitysettings

What does Enable Microsoft Authorization Only do?

Enable Microsoft Authorization Only removes the email-and-password sign-in option for all portal administrators and requires every admin to authenticate exclusively through Microsoft. Note: if MFA using SMS code is currently enabled, turning on this setting will automatically disable it, as the two options are mutually exclusive. Learn more about signing in with Microsoft.nimblr_securitysettings2

What does Enable Multi-factor Authentication (MFA) using SMS code do?

Enable Multi-factor Authentication (MFA) using SMS code requires all portal administrators to enter a one-time code sent by SMS each time they sign in.
  • Prerequisite: All administrators must have a valid phone number registered in the portal before you enable this setting. Each administrator can add or update their phone number by signing in to the portal and going to My Profile > Phone Number.
  • Compatibility: This setting cannot be combined with Enable Microsoft Authorization Only. Enabling Enable Microsoft Authorization Only will automatically turn off SMS MFA.


nimblr_mfa_sms

What does Allow sending email reports to unverified administrators do?

Allow sending email reports to unverified administrators allows monthly usage reports to be sent to Administrators and Group Auditors who have not yet verified their account. An account is considered unverified if the administrator has not yet signed in to the portal or has not yet set a password. By default, these reports are withheld from unverified administrators.