MFA Updates

Date Available: 

Beta 7/25, Prod 8/8

Which customers are impacted?: 

All non-SSO users – borrowers, lenders and third parties – will be impacted by this change.

How to turn on: 

• This feature will be automatically enabled for all customers on the dates listed above

Purpose of Update and Benefit: 

This release is a collection of updates to Blend's MFA feature designed to enhance its security and usability.

There are three components to this update:

1. “Remember this device” Improvements: We polished the MFA verification screen to make it easier for users to remember their device when logging in to Blend. When a device is remembered, a user is not prompted to go through the MFA flow until the end of the device session. Note that, in this case, a device is considered to be either a combination of a web browser and a device, or a mobile app.

In addition to the UI updates, we have extended the device session from 30 to 45 days.

2. “Trouble signing in?” Link: Also on the MFA verification screen, we have added a "Trouble signing in?" link that directs borrowers when they need assistance completing the MFA flow. After clicking the new link, borrowers are prompted to call the default support phone number for the environment. The default support phone number can be changed by a Blend administrator in the Organization settings on the Setup page.

3. New Device Notification Email: When a non-SSO login from a new device is detected, we will now notify the email address associated with the account about this login. This email message is intended to alert users if an unknown actor is attempting to access the user’s Blend account. If this were to occur, the new device notification email allows the user to reset their Blend password and log out of all active sessions. As with the “Remember this device” feature, a device is considered to be either a combination of a web browser and a device, or a mobile app.

Also note that the template for the new device notification email is customizable. Contact Blend Support if you’re interested in customizing this email template.

0 Votes