UniFi Identity Enterprise - Use and Manage the Verify Mobile App

UniFi Verify (iOS and Android) enhances the security of your accounts with two-factor authentication (2FA) for each sign-in. Once enabled, you will need to enter a time-sensitive verification code generated by UniFi Verify or confirm the sign-in attempt through a verification prompt after entering your password.

Add Identity Enterprise Account to UniFi Verify

Identity Enterprise allows you to add an Identity Enterprise account to the UniFi Verify app on up to 5 devices. After adding the account via a QR code scan, the One-Time Password (OTP) will appear on each device, and a verification prompt will be sent. You can then approve your identity verification request on any of these devices.

Add Identity Enterprise Account by Scanning a QR Code

Note: You can set up Verify in UniFi Identity Enterprise only if your workspace admin has enabled Verify and set it as an authentication factor for user enrollment.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com).

   1. Click your profile picture and select Manage Your Account > Security > Multi-factor Authentication (MFA).
   2. Click Add New MFA Method and select Verify.
   3. Verify your account.
2. Open your Verify app.
   1. Tap the upper-right + icon and select UniFi Identity Enterprise Account.
   2. Tap Scan QR Code and scan the QR code shown on the UniFi Identity Enterprise page.
3. Return to your UniFi Identity Enterprise page.
   1. If your workspace admin has enabled passwordless sign-in and allowed you to sign in to UniFi Identity Enterprise with the Verify verification prompt, click Edit > Enable Phone Sign-In on the Verify field. See Passwordless Sign-In and Recovery Code for details.

Add Identity Enterprise Account Using a Secret Key

If you cannot scan the QR code to add a UniFi Identity Enterprise account, follow the steps below to add it using a secret key. You can only verify your account using an OTP if you set up Verify using a secret key.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com).

   1. Click your profile picture and select Manage Your Account > Security > Multi-factor Authentication (MFA).
   2. Click Add New MFA Method and select Verify.
   3. Verify your account.
   4. Click Enter Code Manually on the popup window.
2. Open your Verify app.
   1. Tap the upper-right + icon and select UniFi Identity Enterprise Account.
   2. Tap Enter Secret Key, enter the secret key shown on your UniFi Identity Enterprise page, and tap Continue.
   3. Enter your app name (e.g., your workspace domain) and account name (e.g., albert@ui.com).
   4. Tap Save.
3. Return to your UniFi Identity Enterprise page.
   1. Click Next.
   2. Enter the OTP shown on your Verify app and click Verify > Done.

Add UI Account to UniFi Verify

1. Sign in to account.ui.com.
2. Go to Security and click Click here to make changes in Security settings.
3. Enter your password to unlock security settings and click Unlock.
4. Click Add New Method and select UI Verify.
5. Open your UniFi Verify app and click the upper-right + icon.
6. Tap UI Account and tap Scan QR Code.
7. Scan the QR code displayed on your account.ui.com's security page, and then UniFi Verify will be added as an MFA method for your UI Account. When attempting to sign in to your UI Account, first enter your password, then open the UniFi Verify app and input the 6-digit code shown in the app.

Transfer Accounts from Old to New Device

The Verify mobile app lets you transfer your accounts from an old device to a new device via a QR code or account backup file.

Notes:

• Before migration, please ensure the up-to-date Verify app is installed on both your old and new devices.

• Transferring all your data from your old iOS/Android device to a new one using the device’s features will not transfer your accounts in Verify. You must manually transfer your accounts from Verify on your old device to your new one.

Export Accounts on the Old Device

1. Open your Verify mobile app on your old device.
2. Tap the Gear icon > Export Accounts and select QR Code or Account Backup.
   • QR Code: Select the accounts to transfer and click Transfer. Multiple QR codes may be generated if there are numerous accounts to be migrated. Please ensure to scan all the generated QR codes using your new device. The QR codes expire in 10 minutes.
   • Account Backup: Tap Continue, select the accounts to back up, and tap Back Up. An encrypted BIN file is generated to back up your accounts. Write down the backup file password you've created, as you will need it when importing accounts.

Import Accounts to the New Device

1. Open your Verify mobile app on your new device.
2. Tap the upper-right + icon and do either of the following:
   • Import via QR code: Tap Import Accounts > Obtain QR Code > Scan QR Code and scan the QR code displayed on your old device.
   • Import via backup: Tap Import Accounts > Obtain Backup File > Select Backup File, select a backup file, enter the backup file password, and tap Verify.
3. The exported accounts will be displayed, tap Import.
4. If your Identity Enterprise accounts have the verification prompts feature enabled, the Verify app on your old device will ask you to send the migration requests to your new device. Please authorize your migration attempts on your new device until all account statuses show "Migrated."
5. When imported, the OTP will be displayed on both your old and new devices and the verification prompts will be sent to your new device. It's highly recommended to remove the migrated accounts from your old device once you finish the migration for security reasons.

Note: If the system still sends the verification prompts to your old device, it's possible that you haven't approved the migration attempts. To solve this, do either of the following:

• Import accounts again and ensure to approve the migration attempts.
• Remove Verify from your Identity Enterprise Workspace and set it up again on your new device.

Remove Accounts from the Verify Mobile App

Before You Start

Please note the following:

• If you remove an account that only has OTP enabled, the Verify method will not be removed from your Identity Enterprise Workspace > Manage Your Account > Security > Multi-Factor Authentication. You will still be required to verify your account using the Verify OTP if it is set as a required MFA method by your workspace admins. If you would like to set up Verify OTP on a new device, you can manually remove Verify from UniFi Identity Enterprise and set up Verify again.
• If you remove an account that has both OTP and verification prompt enabled, the Verify method will be removed from UniFi Identity Enterprise > Manage Your Account > Security > Multi-Factor Authentication simultaneously. You can no longer use the Verify app to authenticate your account unless you set it up again.

Remove Accounts

1. Open your Verify mobile app.
2. Tap the Gear icon > Edit Accounts.
3. Tap the Pen icon.
4. Tap Delete.

Remove Verify from UniFi Identity Enterprise Workspace

Once Verify is removed from your workspace, You can no longer use the Verify app to authenticate your account unless you set it up again.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com).

2. Click your profile in the upper-right corner and click Manage Your Account.
3. Go to Security > Multi-factor Authentication (MFA) > Verify.
4. Click Edit > Remove.

Rename Your Verify and Passkey Factors

Rename your Verify and Passkeys as needed after registering your accounts on multiple devices or registering multiple passkeys.

1. Sign in to your Identity Enterprise Workspace (https://[your workspace domain].ui.com) and click your profile picture.
2. Go to Manage Your Account > Security > Multi-factor Authentication (MFA).
3. Select an MFA and click Edit > Rename.
4. Rename your MFA and click Save.