WEBVTT

1
00:00:01.000 --> 00:00:02.567
Chapter six.

2
00:00:02.567 --> 00:00:09.667
Before staff can approve money, they must protect their account with two-step verification.

3
00:00:09.667 --> 00:00:14.268
Yusuf Garba, the Finance Approver, sets it up.

4
00:00:15.200 --> 00:00:18.000
Staff use their own sign-in page.

5
00:00:18.000 --> 00:00:26.006
Staff accounts are never created by sign-up, only through an invitation from an administrator.

6
00:00:26.400 --> 00:00:33.152
From his user menu, Yusuf opens Account security and confirms his password.

7
00:00:34.433 --> 00:00:37.633
DFFMS shows a setup key and a QR code.

8
00:00:37.633 --> 00:00:41.961
He adds them to an authenticator app on his phone.

9
00:00:43.467 --> 00:00:50.533
He is also given single-use recovery codes, to keep somewhere safe in case the phone is lost.

10
00:00:50.533 --> 00:00:53.580
He confirms he has saved them.

11
00:00:53.967 --> 00:00:57.633
Finally he types the six-digit code from his app.

12
00:00:57.633 --> 00:01:00.467
His session now shows as protected.

13
00:01:00.467 --> 00:01:10.955
From now on, approving money, deciding at committee, or opening a financing case all require this second step, and a recent sign-in.