# Set up 2FA in BuildingPro Suites

## What is TOTP?

**TOTP** stands for *Time-based One-Time Password*. It is a time-limited one-time password that is newly generated every 30 seconds. Authentication is performed via an app on your smartphone (e.g., *Google Authenticator*, *Authy*) and ensures that only you have access to your user account—even if someone knows your password.

### **Advantages of TOTP/2FA:**

* Higher security for sensitive tenant data
* Protection against unauthorized access
* One-time passwords also work offline

## Activate Two-Factor Authentication (TOTP)

<div data-full-width="false"><figure><img src="https://3489494878-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9GvUpaatBiReR43XFSMg%2Fuploads%2FESqzxo3bNGwNyyvMDxKx%2F2FA.png?alt=media&#x26;token=692cdf07-2630-4887-8fce-60e5b5df84dc" alt=""><figcaption></figcaption></figure></div>

**How to start the setup:**

1. Click on the user profile in the top right \[A]
2. Click on the gear in the dropdown menu \[B]
3. In the *Profile* section, activate the switch \[C]

   ▷ The setup for TOTP-based two-factor authentication begins

### Turn on OTP/2FA

<figure><img src="https://3489494878-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9GvUpaatBiReR43XFSMg%2Fuploads%2FjtAiFwcv1H5HlUeIRiSf%2F2FA.png?alt=media&#x26;token=b91ae6d7-7c7e-49c9-85ac-c08dff24114b" alt="" width="375"><figcaption></figcaption></figure>

After clicking the switch to activate two-factor authentication, the configuration window opens.

**1. Connect Authenticator App**

* Scan the **QR code** with an OTP-compatible app (e.g., *Google Authenticator* or *Authy*)
* Alternatively: Copy the displayed **setup code** and manually paste it into your app

**2. Confirm OTP Code**

* Enter a **currently generated code** from your authenticator app into the *OTP Code* field
* You have **120 seconds** for this step
* Click **Next** to proceed

{% hint style="info" %}
If the time has expired, restart the process by reactivating OTP/2FA.
{% endhint %}

### Save Recovery Codes

<figure><img src="https://3489494878-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9GvUpaatBiReR43XFSMg%2Fuploads%2FYpNOWh827q6hTTD37HMg%2F2FA.png?alt=media&#x26;token=7020a6d4-2a6a-47b0-97f2-5574883a33ce" alt="" width="375"><figcaption></figcaption></figure>

After successfully activating two-factor authentication, ten recovery codes are displayed once.

These codes serve as a backup in case you lose access to your authenticator app.

* Each code can be used **only once**
* The codes allow you to log in or reset your 2FA
* Save the codes securely in a protected location

To proceed, you must confirm that you have saved the codes. To do this, activate the checkbox and click **Confirm**.

If you lose the codes, access to your account can only be restored by an administrator.

***

## Login with OTP Code

<figure><img src="https://3489494878-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9GvUpaatBiReR43XFSMg%2Fuploads%2F5DXlpAUJjjC2MLuRYXfY%2F2FA.png?alt=media&#x26;token=a03c2a69-d136-47b7-b80d-ac9833ac403f" alt="" width="375"><figcaption></figcaption></figure>

If OTP/2FA is activated, you must authenticate with a one-time password (OTP) from your authenticator app when logging in.

* Open your authenticator app and enter the current 6-digit code
* You have 60 seconds to enter the code
* Click **Verify** to complete the login

If you do not have access to the app, you can use one of your **recovery codes**. If the code is invalid or the time has expired, restart the login process.

**Problems with login?**

* Make sure your device's time and time zone are set correctly
* If necessary, use one of your saved recovery codes
* If access is permanently impossible, contact your tenant administration

***

## Deactivate OTP/2FA

<div align="left"><figure><img src="https://3489494878-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9GvUpaatBiReR43XFSMg%2Fuploads%2FILJZGUGmFYpQAIiXdD7T%2F2FA.png?alt=media&#x26;token=12a3e681-95c8-4f98-b267-9e8b286039c8" alt="" width="375"><figcaption></figcaption></figure></div>

1. Go back to your profile
2. Deactivate the **OTP/2FA** switch
3. To confirm:
   * Enter a valid OTP code
4. Click **"Confirm and Deactivate"**

   ▷ Two-factor authentication will be removed


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.buildings.ability.abb/collection/academy/set-up-2fa-in-eliona.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.