MFA eGuard

MFA eGuard is a secure multi-factor authentication (MFA) companion application designed to provide an additional layer of protection for user accounts and organizational resources. The application enables users to securely verify login attempts using push notifications and one-time passcodes (OTP), helping organizations reduce the risk of unauthorized account access.

Unlike traditional authenticator applications that require users to create an account or sign in directly within the app, MFA eGuard is activated using a one-time activation code provided by an organization's administrator. Once activated, the device becomes securely registered and can be used to approve authentication requests generated by the organization's identity platform.

The application is intended for enterprise and organizational environments where secure identity verification is required before granting access to protected systems, websites, applications, or cloud services.

Key Features

Secure Push Authentication
Receive authentication requests instantly on your registered device whenever a login attempt requires verification. Simply review the request and approve or deny it with a single tap.

Match Number Verification
For enhanced security, authentication requests include a match number. Before approving a request, users verify that the number displayed in the mobile application matches the number shown on the sign-in page. This additional verification step helps protect against phishing and accidental approvals.

One-Time Passcodes (OTP)
Generate rotating time-based one-time passcodes (TOTP) that can be used when push notifications are unavailable or when offline authentication is required.

Fast Authentication Experience
Approve or deny authentication requests within seconds without manually entering verification codes whenever push notifications are available.

Device Registration
Register your mobile device securely using an administrator-issued activation code. No account creation or in-app registration is required.

Device Information
View information about your registered authentication device, including activation details and account information associated with your organization.

Simple Device Management
Manage your registered authenticator device directly within the application. If required by your organization, the registered device can be removed and reactivated on another device using a new activation code.

Biometric Protection
When supported and configured on your device, authentication approvals may require Face ID, Touch ID, fingerprint authentication, or the device passcode to provide an additional layer of security.

Security

Security is the primary focus of MFA eGuard.

The application is designed to help organizations protect user identities through multi-factor authentication. Authentication requests are cryptographically protected and linked to the registered device. Push approval combined with match number verification helps reduce the risk of unauthorized approvals and phishing attacks.

Sensitive authentication data remains protected on the device and is only used for authentication purposes. Users should always verify authentication details before approving any request.

Typical Authentication Flow
Receive a secure authentication request.
Open the request within MFA eGuard.
Verify that the match number displayed in the app matches the number displayed on the sign-in page.
Approve or deny the request.
Complete sign-in securely.

If push notifications are unavailable, users can use the rotating one-time passcode generated within the application if supported by their organization.



An administrator-issued activation code is required before the application can be used.

Requirements

• A valid activation code provided by your organization.
• A compatible mobile device.
• Internet connectivity for push authentication.
• Optional biometric authentication depending on device capabilities.