Enhanced Portal Security: Multi-Factor Authentication

Multi-Factor Authentication (MFA) requirement coming soon for online portal access.

At Preferred Employers, protecting your business is our top priority, and that commitment extends to the security of your online account. To continue strengthening your digital safety, we are introducing Multi-Factor Authentication (MFA) for all customers who access our online customer portal. This enhancement adds an important layer of protection that helps prevent unauthorized access and keeps your sensitive information secure. As cyber threats become more sophisticated, MFA has become a trusted industry standard that provides greater confidence each time you sign in.

What's Changing?

• Multi-Factor Authentication (MFA) will soon be required for all customers accessing the Preferred Employers online portal.

• MFA adds an extra layer of security by using two or more verification steps.

• This change helps protect accounts from fraud, unauthorized access, and credential-based attacks.

Timeline:

This change Impacts both brokers and policyholders accessing our portal.

• February 17: Users can begin setting up MFA from the login screen.

• February 17-April 3: MFA enrollment period

• April 3: MFA enforced for all portal logins

How to Enroll:

1. Beginning February 17, navigate to app.peiwc.com and follow MFA setup instructions below.

2. MFA Registration Prompt
   After entering your username and password, you will see the MFA setup screen. You’ll be presented with multiple MFA options:
   •Notification via Auth0 Guardian app [Recommended]
   •Google Authenticator or similar
   •SMS
   •Security Key

   

   Important Note:
   MFA registration can be deferred until the date shown on your registration screen. The date displayed may differ from the example image above—your screen will show the required deadline specific to your account.
   Example shown in the image: “MFA required starting June 2026.”

3. Setting Up Auth0 Guardian for Push Notifications (Recommended)
   Download the Auth0 Guardian App
   1. On your smartphone, open the App Store (iOS) or Google Play Store (Android).
   2. Search for "Auth0 Guardian".
   3. Download and install the app.

   
   

   
   4. Scan the QR Code (Not the one shown in the image above)
   1. A QR code will appear on your computer screen.
   2.Open the Auth0 Guardian app on your phone.
   3.Tap Scan QR Code.
   4.Point your phone’s camera at the QR code on your computer screen.
   5.Registration completes automatically once the scan is successful.

4. Setting Up an Authenticator App (Google Authenticator, Microsoft Authenticator, Authy, etc.)
   If you prefer using a Timebased OneTime Password (TOTP) app:
   Select TOTP App
   1. Click Google Authenticator or similar on the MFA setup screen.
   2. Select Authenticator App.
   Scan the QR Code
   1. Open your preferred authenticator app (Google Authenticator, Microsoft Authenticator, Authy, etc.).
   2. Add a new account.
   3. Scan the QR code displayed on your computer screen.
   Enter Verification Code
   1. Your authenticator app will immediately generate a 6-digit code.
   2. Enter the displayed code into the MFA setup screen.
   3. Click Verify to complete setup.

5. Setting Up a Security Key (YubiKey or Similar
   FIDO2/WebAuthn Key)
   If you choose to use a hardware security key:
   Select Security Key
   1. Click Try another method.
   2. Choose Security Key.
   Register Your Key
   1. Insert your security key (e.g., YubiKey) into your device’s USB port or tap it via NFC if supported.
   2. Follow the on-screen prompts to register the key.
   3. Touch or tap the key when prompted.
   4. Registration will confirm automatically.

6. Setting Up SMS Authentication (Alternative Method)
   Select SMS Authentication
   1. Click SMS.

   

   
   Enter Your Mobile Number
   1. Enter your mobile number.
   2. Click Send Code.
   Verify the Code
   1. You will receive an SMS with a one-time code.
   2. Enter the code on the MFA setup screen.
   3. Click Verify to complete registration.

7. Authenticating to an Application with MFA Enabled
   Log In
   1. Open the application.
   2. Enter your username and password.
   3. Click Log In.
   Complete MFA Verification
   Depending on what you enrolled:
   • Push Notifications (Guardian): You will receive a push notification. Tap Approve.
   • Authenticator App (TOTP): Open your app and enter the 6-digit code.
   • Security Key: Insert or tap your security key when prompted.
   • SMS: Enter the verification code sent to your mobile device.

   8. Successful MFA Registration
   After completing enrollment, you’ll see a confirmation screen indicating that MFA is enabled.

    

Troubleshooting

• Didn’t receive SMS?
  o Ensure your mobile number is correct.
  o Check network coverage or signal strength.

• Push notification not received?
  o Verify your phone has an internet connection.
  o Ensure notifications for Auth0 Guardian are enabled.

• Authenticator app codes not working?
  o Verify your device’s time is set to automatic and accurate.
  o Rescan the QR code if needed.

• Security key not detected?
  o Try a different USB port.
  o Ensure NFC or USB support is enabled on your device.

Questions? Visit www.peiwc.com, call 888-472-9001, or email [email protected] for assistance.