Multi-factor Authentication (MFA) FAQ's

Q.  Do users need an authenticator app installed prior to launch?

A.  To ensure a seamless login experience, users are encouraged to install an authenticator app before launch. While Microsoft Authenticator is recommended, most standard authenticator apps are supported.

Q. Does INSITE support MFA by text or email? 

A.  

• Text Message (SMS): No. SMS will not be supported at launch.
• Email: Yes. Users may choose to receive a one-time verification code by email at each login instead of using an authenticator app. The code will come from: no-reply@interstatecompact.org

Q.  What happens if a user gets a new phone number or email address?

A.  A new phone number does not affect MFA. If a user’s email address changes, an admin can reset their MFA so they can complete setup again.

Q.  Will INSITE have a new URL?

A.  Yes. The new URL is https://insite.interstatecompact.org. Users who visit ICOTS will be automatically redirected.

Multi-Factor Authentication (MFA) adds an additional layer of security that helps protect sensitive criminal justice data and aligns with federal CJIS Security Policy requirements.