メインコンテンツまでスキップ
This page is not translated yet. 日本語 is switched on so the navigation and URLs can be tested; the text below is the English original. Use the language selector in the header to switch back, or see the documentation home.

Multi-factor authentication

how-to · Reviewed 2026-11-02 · FEAT-0111 GA

Multi-factor authentication (MFA) requires two independent credentials to sign in to Rescale: your password plus a one-time code from an email or authenticator app. Since November 15, 2024, MFA is required for every Rescale user whose organization is not configured to use single sign-on. This page explains how to register an MFA device, choose a default, generate backup codes, and sign in once MFA is enabled.

Before you start​

You need a Rescale account and one of the following second-factor options:

  • Access to the email address on your Rescale account, or
  • A smartphone, tablet, or desktop with an authenticator app installed. Rescale recommends:
    • Google Authenticator (iOS App Store, Google Play)
    • Microsoft Authenticator (Microsoft Store)

If your organization is already using SSO, your IdP's MFA handles the second factor and you do not need to enroll a separate Rescale MFA device.

Managing your MFA devices​

You manage devices from Preferences > MFA Device after signing in to Rescale. Rescale supports two device types: email and authenticator apps. You must have at least one device enrolled to sign in when MFA is required for your account.

When MFA first becomes required, Rescale selects Email as the default MFA device for new users and for existing users who never set one up. You can keep email as your second factor or add an authenticator app if you prefer.

Adding an authenticator app​

  1. Open Preferences > MFA Device.
  2. Click Add Authenticator. Rescale displays a QR code.
  3. Launch your authenticator app on your phone or tablet, create a new entry, and scan the QR code. The app starts generating a six-digit token that rotates every 30 seconds.
  4. Enter the current six-digit token in the Token field on Rescale and click Confirm.

The authenticator app is now registered and appears in your list of MFA devices.

Each platform has its own token

Your authenticator app generates a different token per Rescale platform domain. A token created for platform.rescale.com will not work for eu.rescale.com, platform.rescale.jp, or kr.rescale.com.

Choosing a default device​

If you have more than one device enrolled, use Set As Default on the MFA Device page to pick your preferred one. The default only determines which device you see first during sign-in. You can still use Use Alternative Method at login to authenticate with a non-default device.

Generating backup codes​

Backup codes are one-time codes you can use to sign in if you lose access to your primary device. They come in batches of 10.

  1. On the MFA Device page, click Generate Backup Codes.
  2. In the drawer that opens, click Generate to create and view the codes.
  3. Save the codes somewhere safe, for example a password manager.

Generating a new batch deactivates any previous batch, so only regenerate when you are running low or you think existing codes may be compromised.

Signing in with MFA​

Once MFA is enabled on your account, the sign-in flow has two steps:

  1. Enter your email and password on the login screen and click Log In.
  2. Rescale redirects you to a passcode screen for your default MFA device:
    • Email: Rescale sends a one-time passcode to your inbox. Enter it and click Submit. Optionally check Remember this device to skip MFA on that browser for the next 14 days.
    • Authenticator app: Open the app on your phone, copy the current six-digit token for the platform domain you are signing into, and click Submit.

If you want to use a different device for this sign-in, click Use Alternative Method on the passcode screen. Only the devices you have enrolled appear as options.

Both your authenticator tokens and any "remember this device" choice are scoped to the single platform domain you signed in to, so if your organization uses more than one Rescale platform you enroll and are prompted separately on each.

Recovering a lost MFA device​

If you lose your phone or uninstall your authenticator app:

  1. Sign in with your email and password.
  2. On the passcode screen, click Use Alternative Method.
  3. Choose Backup Codes and enter one of the one-time codes you saved earlier.

If you do not have backup codes, contact Rescale support at support@rescale.com to have your MFA device reset.

Organization-level MFA settings​

Deprecated after November 15, 2024

Organization-level MFA settings were deprecated when MFA became required for all Rescale users. The controls described here remain visible in older deployments but no longer gate sign-in for most organizations.

Where the setting still appears, organization administrators reach it from the organization administration portal under Security, on whichever regional platform their organization is hosted on. Historically three options were available:

  • Disable MFA authentication. Disables MFA for every user in the organization.
  • MFA authentication optional. Lets users decide whether to enroll.
  • MFA authentication required for all users. Forces every user in the organization to enroll and sign in with MFA.