In access control, multi-factor authentication is an authentication method in which the door will unlock only after multiple persons present authenticating multiple credentials in turn. This method is mainly used for locations with high security requirements, such as bank vault. With the mutual supervision of the persons, multi-factor authentication provides higher security for the assets in these locations.

1. Enter Logical View on the Home page to enter the Area Management page.
2. In the area list, select the current site from the drop-down site list to show its areas and select one area.
3. Select the Doors tab to show the added doors in this area.
4. Click Name column to enter the Edit Door page.
5. In the Application, set the Multi-Factor Authentication switch to on to enable this function.
   Figure 1. Set Multi-Factor Authentication
6. Set the access mode of the door.

   Unlock After Access Granted

   The door will be unlocked automatically after the persons swiping their cards (or other type of credentials) on the card readers of the door and the access is granted.

   Remotely Unlock After Granted

   After the persons swiping their cards (or other type of credentials) on the card readers of the door and the access is granted, a window will pop up on the Control Client. The operator of the Control Client should confirm to unlock the door remotely and then the door will be unlocked successfully.

   Enter Super Password After Granted

   After the persons swiping their cards (or other type of credentials) on the card readers of the door and the access is granted, they should enter the super password on the card reader. After that, the door will be unlocked successfully.

7. Set the access schedule to define in which time period, the persons are authorized to access the door.
   Note:

   The default and customized access schedules are displayed in the drop-down list. You can click Add New to customize a new schedule. For details, refer to Set Access Schedule Template.

8. Set the card swiping interval and make sure the interval between two authentications on the card reader is within this value.

   When you set the interval as 5s, if the interval between two authentications is longer than 5s, the authentications will be invalid, and you should authenticate again from the beginning.

9. Click Add to set the access group(s) to define who have the permission to access the door.

   Number of Persons for Authentications

   Define how many persons should authenticate on the card reader.

   For example, if you set 3 for access group Security Guard and 1 for access group Bank Manager, it means three security guards should swipe cards on the card reader (or other access mode), and one bank manager should swipe card on the card reader (or other access mode) for this multi-factor authentication.

   Note:

   This value should be no larger than the number of persons in the access group.

   Card Swiping Order

   Click ↑ or ↓ in the Operation column to set the authentication order of different access groups.

10. Click Save.