To set up or reset multi-factor authentication (MFA) settings, go to your profile icon at the top right of the navigation bar > My account.
About multi-factor authentication (MFA)
Multi-factor authentication (MFA) adds an extra layer of security that helps to prevent unauthorised access and protect sensitive guest and property data. When logging into your account, after entering your e-mail address and password, you'll need to authenticate with a one-time password to complete your login.
Setting up MFA is mandatory within 30 days of your first login. You'll need to authenticate with MFA:
Every 30 days
When using a new browser, device, or incognito mode
After clearing your browser's cookies
To view guest contact and payment details
To modify a Direct booking reservation
When downloading a list of reservations (Reservations page)
To set up a payment gateway
When creating new users or editing existing user’s permissions
MFA is a required security measure to help keep your account secure and protect sensitive data, in compliance with PCI DSS standards.
You can only use one authentication method at a time but can reset it whenever needed. We recommend using the SiteMinder mobile app for MFA as it's the easiest and most secure option. Each person must have their own SiteMinder account with a unique e-mail address.
You can get your one-time password through:
SiteMinder mobile app: our recommended method. Authenticate by matching a unique number and using biometric login (face or fingerprint recognition)
Authenticator app: use a third party app like Authy, Google Authenticator, or Microsoft Authenticator
Web browser authenticator: use browser extensions for example Authenticator or 2! Authenticator
We recommend using the SiteMinder mobile app for MFA as it's the easiest and most secure option. Remember that each person must have their own SiteMinder account with a unique e-mail address.
Set up multi-factor authentication (MFA) with the SiteMinder mobile app
To set up MFA with the SiteMinder mobile app:
Step 1
Download the free SiteMinder mobile on the Apple App Store or Google Play Store.
Step 2
Log in to your SiteMinder account with your e-mail address and password.
Step 3
You will be prompted to set up multi-factor authentication. Click on Secure my account with SiteMinder and follow the on-screen instructions.
Step 4
In your SiteMinder mobile app, tap on Use this device for MFA. Allow access to biometric login (face or fingerprint recognition) by tapping on Enable now.
💡Once you have enabled biometric authentication, you will get a confirmation that MFA has been set up. You will then be taken to your SiteMinder mobile app dashboard and will be automatically logged in on your browser.
Note: If you don’t want to use biometric login, you will need to use an alternate method of authentication.
Set up multi-factor authentication (MFA) with an authenticator app
To set up MFA with an alternate authenticator app:
Step 1
Log in to your SiteMinder account with your e-mail address and password.
Step 2
You will be prompted to set up multi-factor authentication. Click on Alternate authentication options.
Step 3
Select Authenticator app and click Next.
Step 4
On the login page, enter the code sent to your authenticator app. You will then be automatically logged into your SiteMinder account.
⚠️Note: Do not delete the authenticator app after setup or you will need to reset MFA and go through the setup process again.
Set up MFA using a web browser authenticator
You can also use a browser extension authenticator for MFA:
Search for "Authenticator" or "2! Authenticator" in the Chrome web store and add the extension.
Click the extension icon and locate the downloaded Authenticator extension, then click the pencil icon to edit.
Click the plus (+) button to create a new account.
On the SiteMinder login screen, click on the “Having problems scanning, manually enter the code” option.
Copy the code displayed on the screen.
Paste this code into the authenticator extension, then click Next.
Copy the one-time code generated by the extension and paste it into the SiteMinder login page to complete setup.
Reset MFA
You may need to reset your MFA when:
You want to change how you receive your one-time password
You are replacing your current device with a new one
Access to your phone or device has been lost
You have deleted your authenticator app
Your phone has been restored to its factory settings
💡 If you are planning to switch phones or devices, first reset your MFA on your current device. You'll need to complete one final verification with your existing method to avoid any access issues.
Reset MFA yourself
If you can still log into your account and have access to your current MFA method:
Log into your platform and click on your profile icon > select My account.
Click the Reset button.
Complete one final verification with your current authentication method.
Follow the on-screen steps to finish setting up your new MFA method.
Ask another user to reset MFA for you
If you cannot log in because you've lost access to your MFA method:
Ask a user at your property with User Management access to help you (someone that has access to add and manage user accounts).
The user with User Management access should log into their own account > click on the property name.
Select User Management from the drop-down menu.
On the Manage users page, click on the three dots (ellipsis) button next to the name of the user account, then select Edit this user.
They will then need to verify with their own MFA.
Under Security settings next to the current authentication method, they then need to click Reset.
Click the Confirm button to complete the action to reset the user’s MFA.
The user will then be prompted to set up a new MFA method the next time they log in or attempt an action that requires it.
If no one at your property has User Management access, or if those users are unavailable, contact our support team for assistance.
How to log in with MFA using the SiteMinder mobile app
On your desktop, log in with your e-mail address and password.
You will see a number on the multi-factor authentication screen. You will need to select this number in the SiteMinder app.
You will receive a notification on your mobile device asking to authorise the sign in. Open the notification.
Log into your account in the SiteMinder mobile app, select the matching number and complete the biometric login (face or fingerprint recognition).
You will then be taken to the mobile app dashboard and logged in successfully on your desktop device.
💡 Note: If your browser's location differs from your mobile device's location, or if location data cannot be retrieved/is unknown, you'll see a suspicious activity warning. This security feature when using the mobile app for MFA protects your account from unauthorised access:
You'll see a warning screen with sign-in details
Review the details and confirm whether the login attempt was made by you
If legitimate, tap "Yes, it is me" to proceed to the 3-number challenge ,or if you don't recognise the login, tap "No, reject login" to block the attempt
If the "Yes, it is me" option is greyed out and can’t be selected, check that you have the latest version of the mobile app installed. Install the latest version then log in again and verify with MFA