MFA FAQ
Legal matters involve confidential, privileged, and regulated data. MFA significantly reduces the risk of unauthorized access caused by stolen or reused passwords and aligns with standard security expectations across legal and professional services.
Yes. MFA applies to all users in both legal department and law firms who authenticate with a username and password.Users who access the platform through a clients Single Sign-On (SSO) are not impacted.
At login, users will complete a second verification step:
- A one-time, time-limited code via SMS if a mobile number is on file, or
- A secure, time-limited login link sent by email if no mobile number is available
No. MFA does not require installing an authenticator app or additional software.
At this time, MFA methods are system-driven and based on the contact information on file. User-selectable preferences and fallback options are not currently available.
The MFA step adds only a few seconds to the login process and is designed to minimize disruption while significantly improving account security.
Users should follow their standard client support or Onit support channels for assistance with login or MFA-related issues.
