MFA Setup & Security Guide: Authenticator Apps and Access Codes

Purpose: This guide shows you how to set up MFA (your login security code) and fix common sign-in problems.

  

Important Security Restrictions 

- Email Codes Not Allowed: MFA passcodes cannot be sent via email.

- GSA SMS Deprecation: SMS (Text) support for GSA Contract Vehicles ended April 30, 2026. GSA portal users must use an Authenticator App.

- Multi-Portal Access: Each portal is an isolated security environment. If you access multiple vehicles (e.g., Polaris, ASTRO), set up a separate MFA token for each and rename the token in your app to prevent overwriting keys.


Table of Contents  

1. Set Up with an Authenticator App (Recommended)

2. Set Up with Text Messaging (SMS)

3. How to Change Your MFA Device or Method


Before You Start

Make sure you know the following security rules before you begin:

  • MFA is required for every user and every sign-in attempt.
      

  • Google Authenticator is the recommended app, as it supports multiple accounts.


  

Steps

1. Set Up with an Authenticator App during Registration

This is the most reliable method. It creates a new 6-digit code every 30 seconds on your phone or browser extension.
  

  1. Install App: Download an Authenticator App (e.g., Google Authenticator) on your smartphone or a browser extension.
      
  2. Scan Code: On the Symphony Registration MFA screen, scan the QR code with your app or extension.
      
  3. Confirm Code: Enter the 6-digit passcode into Symphony and click Validate and Complete.
      
  4. Label Token: Rename the entry in your app (e.g., "Symphony - Polaris") to keep accounts organized.
      

MFA setup screen showing the QR code and the field to enter the six-digit passcode.

MFA setup screen showing the QR code and the field to enter the six-digit passcode.


2. Set Up with Text Messaging (SMS)

Note: Available for non-GSA portals only. US 10-digit numbers only.
  

  1. Select SMS (Text Message) on the setup screen.
      
  2. Select your mobile carrier and your 10-digit phone number.
      
  3. Click Send My Code, enter the 6-digit code into Symphony, and Validate and Complete.

   

MFA setup screen showing the option to select SMS and the fields for carrier and phone number.

MFA setup screen showing the option to select SMS and the fields for carrier and phone number.


3. How to Change Your MFA Device or Method

If you need to switch your MFA method (e.g., got a new phone), the steps depend on whether you can still sign in.

If You Are...
Action Required
Signed In
Go to Profile Icon ​→ My Credentials. Scan the new QR code directly using your new device.
 
Locked Out / New Device
Submit a Ticket with your registered email and Contract Vehicle to request an MFA Reset.
 


 

My Credentials tab showing the QR code display for MFA changes.

My Credentials tab showing the QR code display for MFA changes.


Troubleshooting & Clock Synchronization

Most "Incorrect Code" errors are caused by device time drift. Passcodes require exact cryptographic time synchronization with the server. 


30-Second Time Sync Fix 

  • iPhone (iOS): Go to Settings → General → Date & Time. Toggle Set Automatically OFF, wait 5 seconds, and toggle it back ON. 
      
  • Android: Go to Settings → System / General Management → Date and time. Toggle Automatic date and time OFF, wait 5 seconds, and toggle it back ON. 
      
  • Google Authenticator App: Open app menu ⋮ → Settings → Time correction for codes → Sync now. 

  

Issue

Fix

Incorrect Code after syncing

Your stored token may be corrupted or overwritten. Submit a Ticket for a Fresh QR Code Reset.
​

Delayed SMS Text Code (takes more than 2–3 minutes).

Restart your phone, turn off Wi-Fi, or switch to an authenticator app.
​

Lost Device / Replaced Phone

Submit a Ticket with the email address associated with your account. The Help Desk will assist with setting up the new device.
​

  

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons

Feedback sent

We appreciate your effort and will try to fix the article