Multi-factor authentication (MFA) is required to access guest details such as contact and payment details, and to complete certain actions in your SiteMinder platform.
MFA adds an extra layer of security to protect sensitive data in compliance with PCI DSS standards and to better protect your account from unauthorised access and phishing attacks.
Multi-factor authentication has replaced the previous verification code (one-time password) method. If you have set up a passkey, you will be prompted to verify with your passkey instead of MFA on supported desktop browsers.
For additional security you'll need to authenticate using your multi-factor authentication (MFA) method to:
View guest contact details (e-mail address and phone number)
View guest payment card details
Modify a Direct booking reservation
Download a list of reservations (Reservations page)
Download a monthly list of reservations for Demand Plus (Demand Plus > Statements)
Set up a payment gateway
Create new users or edit existing user’s permissions
You will be prompted to verify your identity using your chosen MFA method:
Passkey
SiteMinder app
Alternate authenticator app (such as Authy)
Web browser authenticator
How to use multi-factor authentication (MFA) for protected actions
To access protected guest details or complete actions that require multi-factor authentication:
Click on the action you want to do (for example, click on the eye icon to view guest contact or payment details).
When prompted, verify using one of the following methods:
If you have set up a passkey, use your device's unlock method (such as your fingerprint or face scan) on a supported desktop browser.
If you have not set up a passkey, open your MFA authenticator app and enter the six-digit verification code.
If you haven't set up multi-factor authentication (MFA) yet, you'll be prompted to set it up the first time you try to access details or perform an action that requires MFA authentication.
Once you verify with MFA to access details or complete an action, the session will expire after 15 minutes of inactivity or when you log out.