Configuring Multi-Factor Authentication (MFA) for your Dealer Admin Account

Multi-Factor Authentication (MFA) is an added layer of security designed to protect your account when you sign in. You may occasionally see messages such as “We don’t recognize where you’re logging in from—please confirm,” but rest assured this does not mean your account has been compromised. Instead, MFA helps verify that it’s really you by asking for a second piece of information, like a one-time passcode (OTP) sent to your phone, email, or generated by an authenticator app, after you enter your password. This extra step significantly reduces the risk of unauthorized access, especially if a password is ever guessed or compromised, making your overall login experience more secure.

To keep your data secure, OMG uses Multi-Factor Authentication (MFA). This adds an extra layer of protection by requiring a second verification step when you log in, ensuring that only you can access your account.

When you log in to app.ordermygear.com, you will enter your username and password (or use Google SSO) as usual. You will then be asked to verify your identity using one of the methods below:

• Phone (SMS)

• Authenticator Application (Google Auth, 1Password, Authy, etc.)

 

Setting up MFA for the First Time

The next time you log in, you will be prompted to enroll in MFA. Follow these steps:

Step 1: Navigate to app.ordermygear.com and enter your email address and password and hit "Login."

Step 2: On the next screen, you will see two buttons to select an authentication method for subsequent logins.

These options include:

• Google Authenticator or similar (with email being available as a secondary MFA method upon successful set up)

• SMS (with email being available as a secondary MFA method upon successful set up)

Step 3: Make a selection and proceed with MFA set up.

Setting up Google Authenticator or similar for authentication

Choosing this option is the most recommended and secure as it has you use a 3rd party service (Google Authenticator, 1Password, Authy, or etc, etc) to handle generating and storing your OTPs when you need to login.

Step 1: Once you have made the selection, you'll be taken to a page with a QR code appearing. 

Step 2: Pull up your preferred authentication application, and scan the QR code on your screen.

Step 3: Then enter the OTP generated in your application in the field labelled Enter your one-time code* and hit "Continue" to finalize MFA set up.

Step 4: Now, when you sign-in on subsequent attempts, you'll see the following options  after providing your e-mail and password

You can choose to receive the OTP via Email if needed. If you choose that option, you will receive an Email with your OTP code.

Setting up SMS for authentication

If you choose SMS instead, you'll need to have your phone ready that you want to configure to receive SMS texts from OrderMyGear. 

Step 1: Enter the phone number you want to receive the OTP messages at (make sure to select the applicable country code based on the phone number you're entering) and hit "Continue."

Step 2: You'll receive a text message from OrderMyGear similar to the below that you'll enter in to finalize the MFA set up using SMS as your authentication method (the first message is the initial enrollment, and the subsequent two messages are examples of OTP notifications via SMS).

Step 4: On subsequent logins to OrderMyGear, you'll see these two options to authentication only.

You can choose to receive the OTP via Email if needed. If you choose that option, you will receive an Email with your OTP code.

Notes about MFA

• You can choose "Remember Me" when logging in (upon successful configuration of an MFA method) to then have your device remember your log in for 30 days. This means you will NOT have to enter the OTP code for 30 days. This timer is reset however if you clear your browser's cache and cookies.
• Receiving this message does not indicate your dealer admin log in is compromised at all. This is simply an additional enhancement and security measure to further strengthen security when logging into OrderMyGear. MFA has always existed when logging in, but only appeared in specific instances. Now dealer admins will be prompted to providing an OTP code each time they log in, unless they use "Remember me."
• If you lose access to your selected authentication method (i.e. you lost your phone/changed your phone number, can no longer access your email inbox, or cannot access your authentication app on your phone), please contact OrderMyGear support by submitting a ticket or calling us. We can assist you with resetting your MFA access to get you logged in.