UniFi Identity Enterprise - Use and Manage the Verify Mobile App

Users must download the Verify mobile app and use it to generate a one-time verification prompt or 6-digit one-time password (OTP) to verify each access attempt. Verify is enabled by default when UniFi Identity Enterprise is set up.

Set Up UniFi Verify Mobile App

Set Up Verify by Scanning a QR Code

Notes

• You can set up Verify in UniFi Identity Enterprise only if your workspace admin has enabled Verify and set it as an authentication factor for user enrollment.
• You can download the UniFi Verify mobile app from the App Store and Google Play.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com).

   1. Click your profile picture and select Manage Your Account > Security > Multi-factor Authentication (MFA).
   2. Click Add New MFA Method and select Verify.
   3. Verify your account.
2. Open your Verify app.
   1. Tap the "+" icon > UniFi Identity Enterprise Account.
   2. Tap Scan QR Code and scan the QR code shown on the UniFi Identity Enterprise page.
3. Return to your UniFi Identity Enterprise page.
   1. If your workspace admin has enabled "passwordless sign-in" and allowed you to sign in to UniFi Identity Enterprise with the Verify verification prompt, click Edit > Enable Phone Sign-In on the Verify field. See Passwordless Sign-In and Recovery Code for details.

Set Up Verify Using a Secret Key

If you cannot scan the QR code to add a UniFi Identity Enterprise account, follow the steps below to add it using a secret key. You can only verify your account using an OTP if you set up Verify using a secret key.

1. Sign in to your Identity Enterprise Portal (https://[your workspace domain].ui.com).

   1. Click your profile picture and select Manage Your Account > Security > Multi-factor Authentication (MFA).
   2. Click Add New MFA Method and select Verify.
   3. Verify your account.
   4. Click Enter Code Manually on the popup window.
2. Open your Verify app.
   1. Tap the "+" icon > UniFi Identity Enterprise Account > Enter Secret Key.
   2. Enter the secret key shown on your UniFi Identity Enterprise page and tap Continue.
   3. Enter your app name (e.g., your workspace domain) and account name (e.g., albert@ui.com).
   4. Tap Save.
3. Return to your UniFi Identity Enterprise page.
   1. Click Next.
   2. Enter the OTP shown on your Verify app and click Verify > Done.

Migrate Accounts on Verify

The Verify mobile app lets you transfer your accounts from an old device to a new device via a QR code or account backup file.

Note: Before migration, please ensure the up-to-date Verify app is installed on both your old and new devices.

Export Accounts

1. Open your Verify mobile app on your old device.
2. Tap the Gear icon > Export Accounts and select QR Code or Account Backup.
   • QR Code: Multiple QR codes may be generated if there are numerous accounts to be migrated. Please ensure to scan all QR codes while importing the accounts. The QR codes expire in 10 minutes.
   • Account Backup: An encrypted BIN file is generated to back up your accounts. Remember the PIN you've set when creating the backup, as you will need it when importing accounts.

Import Accounts

1. Open your Verify mobile app on your new device.
2. Tap the “+” icon in the right upper corner.
3. Do either of the following:
   • Import via QR code: Tap Import Accounts > Obtain QR Code > Scan QR Code and scan the QR code displayed on your old device.
   • Import via backup: Tap Import Accounts > Obtain Backup File > Select Backup File, select a backup file, enter the backup file password, and tap Verify.
4. The exported accounts will be displayed, tap Import.
5. If your Identity Enterprise accounts have the verification prompts feature enabled, the Verify app in your old device will ask you to send the migration requests to your new device. Please authorize your migration attempts on your new device until all account statuses show “Migrated”.
6. When imported, the OTP will be displayed on both your old and new devices and the verification prompts will be sent to your new device. It’s highly recommended to remove the migrated accounts from your old device once you finish the migration for security reasons.

Note: If the system still sends the verification prompts to your old device, it's possible that you haven't approved the migration attempts. To solve this, do either of the following:

• Import accounts again and ensure to approve the migration attempts.
• Remove Verify from your Identity Enterprise Workspace and set it up again on your new device.

Remove Accounts from the Verify Mobile App

Before You Start

Please note the following:

• If you remove an account that only has OTP enabled, the Verify method will not be removed from your Identity Enterprise Workspace > Manage Your Account > Security > Multi-Factor Authentication. You will still be required to verify your account using the Verify OTP if it is set as a required MFA method by your workspace admins. If you would like to set up Verify OTP on a new device, you can manually remove Verify from UniFi Identity Enterprise and set up Verify again.
• If you remove an account that has both OTP and verification prompt enabled, the Verify method will be removed from UniFi Identity Enterprise > Manage Your Account > Security > Multi-Factor Authentication simultaneously. You can no longer use the Verify app to authenticate your account unless you set it up again.

Remove Accounts

1. Open your Verify mobile app.
2. Tap the Gear icon > Edit Accounts.
3. Tap the Pen icon.
4. Tap Delete.

Remove Verify from UniFi Identity Enterprise Workspace

Once Verify is removed from your workspace, You can no longer use the Verify app to authenticate your account unless you set it up again.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com).

2. Click your profile in the upper-right corner and click Manage Your Account.
3. Go to Security > Multi-factor Authentication (MFA) > Verify.
4. Click Edit > Remove.