Additional security settings

To strengthen protection against unauthorized access, you can enable two‑factor authentication for manager and customer accounts, as well as enforce its use. For managers, you can also allow signing in with a Microsoft work account. In addition, you can enable Google’s free captcha to protect the Customer Control Panel from automated registrations.

Before you begin

  1. If you are setting up captcha, obtain the site key and secret key for reCAPTCHA v2 (invisible badge) from Google.

  2. If you are setting up sign‑in with a Microsoft account, request instructions from the ActivePlatform team on how to obtain the data required for Microsoft Entra ID configuration.

What to do

  1. Enable captcha in the Customer Control Panel: see Configuring Google reCAPTCHA v2 in .

  2. Set up two‑factor authentication for a manager: .

  3. Enforce two‑factor authentication for all Customer Control Panel users: .

  4. Enforce two‑factor authentication for all Operator Control Panel users: .

  5. If you are setting up sign‑in with a Microsoft account:
    a. Create an SSO provider: .
    b. Configure authentication methods for the Operator Control Panel: .