MFA significantly reduces the risk of unauthorised access by requiring a second verification step. Even if a password is compromised, MFA helps ensure that only authorised users can access the Adviser Portal.

We offer multiple MFA options via Auth0 to give you flexibility:

• Authenticator app
  (e.g. Google Authenticator, Microsoft Authenticator and other compatible apps)
  • Scan a QR code during setup
  • Receive a time-sensitive code each time you log in
• WebAuthn
  • Use built-in device security such as a fingerprint scanner on your laptop or mobile, or
  • Use a physical security key (e.g. Yubico), if available

Email can be used to reset multi-factor authentication (MFA), however, it cannot be used in the initial setup, and we depend on the security controls on your email account to protect the reset link. We strongly recommend protecting your email account with MFA. 

If you use multiple devices to access the platform, you will need to set up MFA for each one. Within the authenticator app, there should be a separate code for each device that you've registered.

Below we have outlined the journeys. If you experience any difficulty logging in to the platform, please don't hesitate to contact our service centre team on servicecentre@soerbergpartners.com or call 0117 463 5100.

In all instances, you will begin by opening the platform using either adviser.soderbergpartners-wm.co.uk, or your firm's personalised URL if you have completed the branding process:

The first time you do this you will be given the option of using an authenticator app, or a security key:

Logging in using an authenticator app

Select 'Google Authenticator or similar' and you will be presented with a QR code (the below has been crossed out for security purposes!):

If you are using a mobile phone, you'll be provided with a code instead. Select copy code:

Open the relevant app - in this case I have used Google Authenticator

Click on the '+' symbol and select 'scan a QR code' if you are on a desktop:

The camera on your device will be automatically activated, and you should use this to scan the QR code on your computer screen:

If you are using a mobile phone, select enter setup key, and paste the code in to the 'your key' field. You will need to enter an 'account name', so call this something easy to identify:

This will automatically add a new row within the authenticator app and this will provide a code, which updates every 30 seconds. Enter this in to the platform login page:

You may then be asked if you wish to set up fingerprint/facial recognition for future logins:

Desktop

Phone:

By clicking continue you will be taken in to the journey for setting up facial recognition/fingerprint scanning. Otherwise clicking Remind me later on not on this device will take you in to the platform.

When you log in in future, you will need to open the authenticator app and simply input the code it generates automatically when prompted.

Logging in using built in security (in this case, facial recognition)

Select security key

If you tick the 'remember this device' box, you will not be prompted to complete the additional MFA step for 30 days, at which point you will need to complete this process again.

Depending on your operating system, you will be prompted to set up a passkey:

Click ok, and your inbuilt camera will then identify you, and this will then take you in to the platform.

Logging in using email 

N.B. this will not be an option the first time you set up MFA. This is ONLY available during the MFA reset process.

If you select 'google authenticator or similar', underneath the QR code you will see a button for 'try another method'

Here there is an additional option for email, so if you do not have easy access to a secondary device, and you do not have facial recognition/fingerprint technology set up, you have an easy alternative. 

If you click Email, this generates an email with a code to your registered email address. 

Enter the code, click continue, and you will be taken through to the platform. Again you may wish to click the 'remember this device' button to bypass this process for the next 30 days.