How clients sign in

Choose how your clients sign in under Settings > BMS for Clients > Security and Two-factor, in Client access to portal.

Client access to portal: three choices, Magic Link and Login by default.

Choice	How a client signs in
Magic Link only	Only with a sign-in link emailed to them. No password.
Magic Link and Login (default)	With a sign-in link, or with their email and password.
Magic Link and Login with 2FA	As above, and a code from an authenticator app after the password.

Press Save at the bottom of the page.

Needs setup

Magic Link and Login with 2FA can be chosen only once whoever runs your BMS has set up the key that stores authenticator secrets safely; until then the page says so. Sign-in links need email to be set up.

Clients with two-factor authentication lists who has set it up. To reset one, see Resend, revoke or edit a client’s sign-in.