ºÚÁϺ£½Ç91Èë¿Ú

Users: ºÚÁϺ£½Ç91Èë¿Ú Protect®

Note:

ºÚÁϺ£½Ç91Èë¿Ú Protect® is designed to operate on Android 8 and iOS 13 and higher. It may operate on older versions, but they aren't supported by ºÚÁϺ£½Ç91Èë¿Ú. 

ºÚÁϺ£½Ç91Èë¿Ú Protect is a mobile app for iOS and Android that can be used for Multi-Factor Authentication (MFA) or 2-step verification. Once the app is downloaded, and the device is enrolled, the app can be used for push notifications or as an authenticator (TOTP). 

The app can be downloaded from the or the . After you've downloaded the app and successfully enrolled your device, you can authenticate using Push MFA or Verification (TOTP) Code MFA, see MFA Guide for Admins to learn more.

ºÚÁϺ£½Ç91Èë¿Ú Protect sends a push notification to your enrolled mobile device after you’ve attempted to access a resource with your username and password.

Prerequisite:

  • Your Admin has to enable ºÚÁϺ£½Ç91Èë¿Ú Protect in order for you to download it.

Considerations:

  • The ºÚÁϺ£½Ç91Èë¿Ú Protect app supports iOS version 13 and above, Android 8.0 and above.
  • The ºÚÁϺ£½Ç91Èë¿Ú Protect app may run on a tablet, but isn’t optimized for tablets at this time. 
  • A user can only be enrolled in ºÚÁϺ£½Ç91Èë¿Ú Protect on one device.
  • Mobile Push is supported for authentication into the User Portal, SAML SSO apps, device logins, and for Password Reset. 
  • ºÚÁϺ£½Ç91Èë¿Ú Protect will collect certain diagnostic data for troubleshooting issues and continuous app improvements. No user info is collected. These options are toggled On by default, users can turn off the data collection on the app.
    • To do this, tap More > Settings to display options for toggling off Share Diagnostic Data.

Note:

This help article provides info for ºÚÁϺ£½Ç91Èë¿Ú users. For Admins looking to set up the ºÚÁϺ£½Ç91Èë¿Ú Protect app for their users, see ºÚÁϺ£½Ç91Èë¿Ú Protect Admin Guide to learn more.


Workflow:

  • You'll receive the login request on the lock screen of your device, and can approve/deny with a long press (iOS) or by expanding the notification (Android).
  • If your Admin requires biometric authentication, the login request won't complete without it (Face ID, fingerprint, or passcode).
  • When you approve the login request, you gain access to your resource. If you tap deny, the login request is declined, which prevents bad actors from accessing your account.

Note:

A push notification is valid for 60 seconds before the User Portal gets timed out in which case the user needs to initiate the push notification process again. If the user responds to an expired push notification on the device, an error appears.

You can use ºÚÁϺ£½Ç91Èë¿Ú to log into the Admin Portal, User Portal, or into your Windows, Mac, or Linux devices. 

Protecting Against Push Bombing and MFA Fatigue Attacks

Push Bombing is a hacking method of triggering multiple 2FA attempts using push notifications until the user may accept the request accidentally. MFA fatigue is the term for when, due to the multiple 2FA requests, a user accepts the fraudulent request out of frustration.

To protect yourself against these types of attacks:

  • Make sure you're following a strong password policy.
  • Enable biometric authentication on your device and ask your Admin to enable it for ºÚÁϺ£½Ç91Èë¿Ú Protect.
  • Verify the app and location info before approving a push request.

Note:

ºÚÁϺ£½Ç91Èë¿Ú protects against fraudulent push attempts by blocking more than one notification per resource within a 60 second timeout period (the number of maximum concurrent attempts can be changed by an Admin). You can try again after the timeout or after you've approved or denied the initial request.


Setting Up ºÚÁϺ£½Ç91Èë¿Ú Protect 

If your org is using ºÚÁϺ£½Ç91Èë¿Ú Protect for their MFA, you’ll need to complete the initial setup for it.

Tip:

Guide Me:

To set up the ºÚÁϺ£½Ç91Èë¿Ú Protect app:

  1. Log in to your .
  2. Go to Security > Multi-factor Authentication > ºÚÁϺ£½Ç91Èë¿Ú Protect Mobile Push > Enroll Device.

Note:

When you log in to your User Portal, you may be prompted to activate MFA without going to the Security screen.

  1. Download the ºÚÁϺ£½Ç91Èë¿Ú Protect App from the or the . You can do this in one of three ways:
    • Search for "ºÚÁϺ£½Ç91Èë¿Ú Protect" in the Google Play Store on Android devices or the App Store on iOS devices.
    • Use the links provided on the notification screen to remotely download the app to your device.
    • Click View QR Code to Launch Google Play Store or App Store to display a QR code that your phone’s camera can scan to display the link for downloading the app.
  2. Once the ºÚÁϺ£½Ç91Èë¿Ú Protect app is downloaded, open it on your device. 
  3. If introductory info displays, tap Next and then tap Get Started (or skip the messages).
  4. Click Allow for the app to send notifications to your device. 
  5. Tap + Add Account.

Note:

ºÚÁϺ£½Ç91Èë¿Ú Protect supports both Push MFA and TOTP MFA. However, you have to enroll in each form separately.

  1. You're prompted to give the app permission to use your phone’s camera, click Allow.
  2. You're directed to scan a QR code in your ºÚÁϺ£½Ç91Èë¿Ú User Portal. Back in the User Portal, click I Have the App.
    • Alternatively, you can click Enter Code Instead to view the account details and manually enter them in the ºÚÁϺ£½Ç91Èë¿Ú Protect app. 
  3. Scan the QR code in the ºÚÁϺ£½Ç91Èë¿Ú Protect app. 
  4. A green checkmark displays, indicating that the device has been verified. Click Done in both the ºÚÁϺ£½Ç91Èë¿Ú Protect app and the User Portal.

Note:

If ºÚÁϺ£½Ç91Èë¿Ú Protect isn't in the foreground when you complete this process, you'll receive a push notification. You have to click Approve for the process to complete.

Tip:

Guide Me: and

Transitioning to ºÚÁϺ£½Ç91Èë¿Ú Protect from a Previous Authenticator

You can transition to ºÚÁϺ£½Ç91Èë¿Ú Protect if you're already using a different authenticator to verify your identity through Verification Code (TOTP) MFA.

To transition to ºÚÁϺ£½Ç91Èë¿Ú Protect from a different authenticator:A compilation of images displaying the process to transition to ºÚÁϺ£½Ç91Èë¿Ú Protect from other authenticators.

  1. Log in to your .
  2. Go to Security.
  3. Click Reset Authenticator App.
  4. On the next screen, enter the verification code from your current authenticator and click Clear Authenticator App Settings.
  5. A QR code is displayed. In the ºÚÁϺ£½Ç91Èë¿Ú Protect app, tap the ( + ) button.
  6. Scan the QR Code.
  7. Enter the code, and click Submit.

Authenticating with ºÚÁϺ£½Ç91Èë¿Ú Protect

If your org has enabled ºÚÁϺ£½Ç91Èë¿Ú Protect for your account, and if you've enrolled your device, you'll receive a push notification on your device when you attempt to log in to a resource secured by your ºÚÁϺ£½Ç91Èë¿Ú Admin. If Biometric User Verification is set to Required, the login request doesn't complete without it (Face ID, fingerprint, or passcode). Select Approve on your device to log in to the resource. Select Deny on your device if you're not the one who requested the notification.

Note:

It's a good security practice to check the app and location info before approving a push request, in case the request is fraudulent. Location info doesn't have 100% accuracy, especially at the city level. If you suspect a request is fraudulent, deny the request and notify your Admin.

Apple Watch

You can also see and respond to ºÚÁϺ£½Ç91Èë¿Ú Protect notifications on your Apple Watch.

The watch has to be paired with an iPhone running the ºÚÁϺ£½Ç91Èë¿Ú Protect app, and notifications have to be enabled for the app.

Note:

If your Admin requires biometric authentication, the notification on the watch will prompt you to open the app on your phone.

Resetting Your Password with ºÚÁϺ£½Ç91Èë¿Ú Protect Push

To reset your password from the User Portal login screen:

  1. Go to the .
  2. Click Reset User Password.
  3. Enter your company email address and click Send Reset Request.
  4. Click the secure link that's been sent to the email address you entered.
  5. Enter your new password in both password fields and click Reset Password.
  6. Optional: If you only have one form of MFA enabled for your account, you'll proceed to the next step. If you have multiple, select ºÚÁϺ£½Ç91Èë¿Ú Protect Mobile Push.
  7. Click Send Password Reset Request to Mobile Device
  8. On your device, approve the request.

After you complete the authentication, your password is reset and you can log in.

Step-Up Authentication with ºÚÁϺ£½Ç91Èë¿Ú Protect

You can use ºÚÁϺ£½Ç91Èë¿Ú Protect as your Step-Up Authenticator as well. Step-Up Authentication is required when you’ve logged in to your User Portal and you need to access an app that requires an additional layer of security through a second authentication factor. 

To log in to an application that requires Step-Up Authentication:

  1. Log in to your .
  2. Click the app you need to access.
  3. Select ºÚÁϺ£½Ç91Èë¿Ú Protect from the list of available MFA options. 
  4. When the request pushes to your mobile device, approve the request.

Note:

Denying the request logs you out of your ºÚÁϺ£½Ç91Èë¿Ú User Portal. This is to keep bad actors from accessing your app and data.

After you approve your request, you have access to the app. 

Using ºÚÁϺ£½Ç91Èë¿Ú Protect’s TOTP for Other Applications

Note:

ºÚÁϺ£½Ç91Èë¿Ú Protect supports both Push MFA and TOTP MFA. However, you have to enroll in each form separately.

When you open the ºÚÁϺ£½Ç91Èë¿Ú Protect app, you see a list of the accounts you have set up for MFA. This list either shows the Verification Code for the account with a timer indicating when the code will expire, or that the account is registered for Push MFA.


jumpcloud protect accounts list

Tapping on the code itself will copy the code to the device’s clipboard. Tapping anywhere else opens the Account Details screen.

More Screen

At the bottom of the ºÚÁϺ£½Ç91Èë¿Ú Protect screen, there is a More button. You can do a variety of things from here:

  • Tap Settings to access Display and Privacy options.
  • The links to How it Works, Troubleshooting Guide, Terms of Service, and the Privacy Policy open external links.
  • Tap on the App Version or the Protect ID to copy those values to your clipboard.

Deleting an Account from ºÚÁϺ£½Ç91Èë¿Ú Protect

If you no longer need one of the accounts you have set up with your ºÚÁϺ£½Ç91Èë¿Ú Protect mobile app, you can delete it.

To delete an account:

  1. Open the ºÚÁϺ£½Ç91Èë¿Ú Protect mobile app on your device.
  2. Tap the name of the account you want to delete. This opens the Account Details screen.
  3. Tap Delete Account.
  4. Tap Delete in the window that appears.

Additional Resources:

Knowledge Base: Troubleshoot: ºÚÁϺ£½Ç91Èë¿Ú Protect

Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case