Multi-Factor Authentication for Candidate Portal

• Default Off (Self-service)

Who: Candidates

Requirements: 

• Career Site Experience IX (PCS IX) and Candidate Portal (Logged-in PCS) must be enabled

• Candidates must use a valid mobile phone number capable of receiving SMS text messages to complete the authentication process when using a password to login.

What's new: You can now enforce SMS-based Multi-Factor Authentication (MFA) for candidates logging into the candidate portal (Logged-in PCS IX) with an email and password. This feature adds a secondary security layer by requiring a six-digit one-time password (OTP) sent to a mobile device via SMS during account signups, logins, and password resets. Enforcing MFA helps you meet strict compliance standards and eliminates single points of failure to prevent unauthorized account access.

How it works: After entering their email and password, candidates are asked to provide their phone number and receive a text message containing a temporary six-digit code. They must enter this code in the portal to verify their identity and successfully complete the login or signup process.

To enable this feature, search for this feature in Admin Console > Feature Management and click Enable.