If you have lost your hardware token or have a new phone, it may be the case that you need to update your MFA settings. You can always delete a device by going to the authentication settings page in Backstage, and clicking the pencil icon for the device you want to update. This requires that you still have access to your Backstage account either via recovery codes or an additional MFA device. If you don't have access to your account please see: Backstage Account Recovery.
From here you have to option to change the settings for each device:
- Change the name of the device.
- Remove the device from your Backstage profile. Removing an MFA device requires you to re-enter your password. The selected device will be removed from your account and if this is your only device registered you will be asked to set up a new MFA device on your next login.
If you have used all of your recovery codes, lost them, or they were stolen, you should generate new ones on this page. Click the circular arrow button. This will replace any existing codes with 10 new ones.
Backstage supports registering multiple MFA devices per profile. To register another device, first log in to backstage and navigate to the authentication settings page. Here at the bottom of the page you will see a description of each available MFA method with a button to register. Clicking the “Register” button for the method of your choice will prompt you to set up a new device. Simply follow the steps, and you'll be returned to the authentication settings page once complete. Please note that whilst we support multiple WebAuthn devices per Backstage profile, we only support one one-time password device and one push authentication device per profile. Additionally, if you previously opted out and wish to opt in now, you can do so by following the aforementioned steps.
We strongly recommend registering more than one device so that if something happens to one of the devices you're not locked out of your account.