Skip to content

Understanding user security

Koordinates provides users with a number of additional security controls. Site and group administrators can see each user’s security status, to help them decide who should have access to which resources.

The status shows as badges in the user lists on the Users & Groups page, including when you add users to a group, and in each user’s details. The Verified badge appears next to the user’s email address, and the other badges in the Status column. Select a badge to see what it means.

The security badges are:

3rd Party Auth

Users with this badge have logged in using a 3rd party authentication provider configured by their organisation. For example, this could be a Microsoft Entra ID or Okta identity gateway. The email addresses for these users are owned and controlled by their organisation. The user account can also be considered as “email verified” for the purposes of managing access.

Koordinates reviews and configures 3rd party authentication providers on behalf of our customers.

See also Okta Integration with Koordinates ID

Verified

This badge indicates that we have verified the user’s email address by way of a link delivered to that user’s email inbox. The user has clicked the link and confirmed that the email address is owned (and actively monitored) by the user in question.

See also Verifying your email address

2FA

2FA, also known as Multi-Factor Authentication, indicates the user has taken the additional step to configure a 2FA step to protect their logins. The user needs to provide their email and password, as well as a token from a 2FA application on a physical device to access their account.

Koordinates 2FA isn’t available to users who sign in to Koordinates ID with a third-party authentication provider, so these users don’t show the 2FA badge.

See also Create & Use Multi-Factor Authentication (MFA)