Modern Multi-Factor Authentication (MFA) at Ninety

Starting on 11 December 2025, all new users can secure their Ninety login credentials with either:

• Single-sign on (SSO) from Microsoft of Google.
• Temporary one-time password (TOTP) generation to a preferred authenticator app.

Existing users with accounts started before 11 December 2025, can still utilize SMS as their preferred or backup MFA option. More details below.

How to Require MFA for Your Company

An Owner or Admin can require all users to use MFA by visiting Settings > Configuration and toggling on Require MFA in the Security section — for new users, the security may say Require Authenticator for all users of company instead. The user who turns this on is unaffected by the change until they log out of their current session. At the next login, the owner follows the MFA requirements.

After enabling MFA for your company, team members who use an email address and password to log in (not SSO) will need to use MFA the next time they log in.

For example, after an Owner or an Admin enables requiring MFA for all users on their account, the next time one of their team members attempts to log into Ninety, they'll be prompted to set up MFA with an authenticator app of their choice.

How to Set Up MFA for an Individual Account

If a company does not require MFA, a user can still enable it for personal use by visiting User Settings > Account.

To activate MFA with an authenticator app:

1. Click your name at the bottom of the left navigation.
2. Click User Settings from the option shown in the popup.
3. Click Account from the user setting navigation options.
4. Identify the Authenticator section and click Set up your authenticator app.
5. Scan the QR code using a trusted authenticator app, such as Google Authenticator or Authy.
6. Enter the six-digit code from the authenticator app and click Verify.

If your company does require MFA for your Ninety login, the first time you sign in, you'll be prompted to set up an authenticator app before accessing Ninety. To do so, you'll download a trusted authenticator app on your smartphone, scan the QR code, and enter the six-digit code from the app to verify.

How to Switch Authenticator Apps

To switch apps after enabling an authenticator:

1. Navigate to User Settings > Account. 
2. Click Change authenticator app to switch to another trusted app. 
3. Verify your password before scanning the QR code and entering the code.

How to Delete an Authenticator App Connection

If you'd like to remove the connection between Ninety and an authenticator app from our platform:

1. Navigate to User Settings > Account.
2. Click the trash can icon on the right side of the Authenticator section.
3. Confirm your choice by clicking Remove on the popup.

Legacy SMS Verification

If you created your Ninety account before 11 December 2025, you can still utilize SMS as your preferred or backup method for MFA.

If you have access to MFA via SMS, follow these directions to set it up:

1. Navigate to User Settings > Account.
2. Verify your phone number in the Login Information section.
3. Enable SMS.