New security enhancements for portal users: MFA and password management

New security enhancements for portal users: MFA and password management

Hello everyone,

We are excited to announce three major security enhancements that are now available to portal users in Zoho CRM:

  • Organization-wide multi-authentication for portal users - Admins can enforce multi-factor authentication across the entire portal to ensure consistent, enhanced security for all users.
  • Individual MFA set up for portal users - Portal users can individually enable and manage MFA from their account settings when an org-wide enforcement is not enabled.
  • Change Password option is available in portal user account - Portal users now have a simpler way to manage their passwords, allowing them more control and convenience.

Notes
Note. We are supporting only the OTP authenticator mode now. 

Let's look at them in detail.

Organization-wide multi-factor authentication for portal users

CRM users who have the Manage Portal permissions, can now enable MFA across the entire organization.

- When MFA is mandated, all the portal users will be required to authenticate using an MFA code during their next login.
- If a portal user is already logged in, they will not be interrupted. However, the next time they sign in, an MFA will be required.
- When the user logs in for the first time after the MFA is mandated for all portal users - after entering the TOTP from their authenticator, they will be shown a screen - where they can either choose to trust this browser or not.



If they select trust this browser, they need not enter TOTP during their next login (for 180 days).



- If a user loses access to their authenticator app (that is if they lost their phone, deleted the app, etc.), the portal admin can reset MFA for their account.
- Reset MFA can be done by users with either manage portals or manage portals users permission.



NotesNote. Portal users cannot disable MFA or delete their authenticator if org-wide MFA is mandated.


Individual MFA setup for portal users

If MFA is not mandated org-wide:

- Portal users can still enable MFA individually from their account settings.
- They can also manage or delete their MFA configuration on their own.

- This gives users the flexibility to add a layer of security even when it is optional.

NotesNote. When MFA is enabled, the user will need to enter an OTP from their authenticator app during future logins.

Portal users now able to change passwords

Another update you see now is a simpler way for portal users to manage their passwords.

Previously, users had to rely on the Forgot Password option during login in order to update their passwords. Now, a new Change Password option is available under the More option in the portal user account, which allows the user more control and convenience.

Editions: Portals-supported editions.

Do learn more about this from our help doc.

    Access your files securely from anywhere


          All-in-one knowledge management and training platform for your employees and customers.







                                Zoho Developer Community




                                                      • Desk Community Learning Series


                                                      • Digest


                                                      • Functions


                                                      • Meetups


                                                      • Kbase


                                                      • Resources


                                                      • Glossary


                                                      • Desk Marketplace


                                                      • MVP Corner


                                                      • Word of the Day


                                                      • Ask the Experts





                                                                Manage your brands on social media



                                                                      Zoho TeamInbox Resources



                                                                          Zoho CRM Plus Resources

                                                                            Zoho Books Resources


                                                                              Zoho Subscriptions Resources

                                                                                Zoho Projects Resources


                                                                                  Zoho Sprints Resources


                                                                                    Qntrl Resources


                                                                                      Zoho Creator Resources



                                                                                          Zoho CRM Resources

                                                                                          • CRM Community Learning Series

                                                                                            CRM Community Learning Series


                                                                                          • Kaizen

                                                                                            Kaizen

                                                                                          • Functions

                                                                                            Functions

                                                                                          • Meetups

                                                                                            Meetups

                                                                                          • Kbase

                                                                                            Kbase

                                                                                          • Resources

                                                                                            Resources

                                                                                          • Digest

                                                                                            Digest

                                                                                          • CRM Marketplace

                                                                                            CRM Marketplace

                                                                                          • MVP Corner

                                                                                            MVP Corner









                                                                                              Design. Discuss. Deliver.

                                                                                              Create visually engaging stories with Zoho Show.

                                                                                              Get Started Now


                                                                                                Zoho Show Resources

                                                                                                  Zoho Writer

                                                                                                  Get Started. Write Away!

                                                                                                  Writer is a powerful online word processor, designed for collaborative work.

                                                                                                    Zoho CRM コンテンツ





                                                                                                      Nederlandse Hulpbronnen


                                                                                                          ご検討中の方





                                                                                                                    • Recent Topics

                                                                                                                    • Overview on users IMAP settings

                                                                                                                      We have about 30 users who all have the channels/email/email configuration/IMAP integration/O365 enabled and emails are synchronized. Here my problem: Passwords for the email accounts are expiring on individual bases and most of the users forget to update
                                                                                                                    • What is a realistic turnaround time for account review for ZeptoMail?

                                                                                                                      On signing up it said 2-3 business days. I am on business-day 6 and have had zero contact of any kind. No follow-up questions, no approval or decline. Attempts to "leave a message" or use the "Contact Us" form have just vanished without a trace. It still
                                                                                                                    • crm to books

                                                                                                                      We currently sync CRM Contacts to Zoho Books Customers using two-way sync. We now wish to change to "Accounts & their Contacts". What happens to existing Books customers? Will they be merged with CRM Accounts, duplicated, left unchanged, or recreated?
                                                                                                                    • Is there any way to have Dataprep ingest RSS?

                                                                                                                      As stated by the title. Does the Zoho environment offer tools that I can use to, directly or using workarounds, have Dataprep ingest an RSS feed? Thanks
                                                                                                                    • Alternate color rows

                                                                                                                      After I changed the background color to a dark gray and changed the alternate rows to a light gray. I have discovered that I can no longer change the text in the light gray rows to Bold.
                                                                                                                    • Tax/Vat Number Field As Standard - Customer & Vendor

                                                                                                                      Hello, when are you'll going to have the customer & vendor tax/vat number as a standard field under the relevant profile pages? I find it strange that after 6 years of using Zoho Inventory that I still have to use a custom field for a tax/vat number,
                                                                                                                    • Is there a way to sync Tags between CRM and Campaigns/Marketing Hub?

                                                                                                                      I wonder if there is a way to synch the tags between CRM and Marketing-Hub / Campaigns?
                                                                                                                    • Free Webinar Alert! Zoho Mail + Zoho CRM: Turn inbox replies into CRM deals

                                                                                                                      Hello Zoho Community! Are your sales conversations happening in Zoho Mail while your customer data lives in Zoho CRM? Join our upcoming webinar to learn how integrating the two can help you automate follow-ups, capture leads faster, and keep every customer
                                                                                                                    • Displaying only unread tickets in ticket view

                                                                                                                      Hello, I was wondering if someone might be able to help me with this one. We use filters to display our ticket list, typically using a saved filter which displays the tickets which are overdue or due today. What I'd really like is another filter that
                                                                                                                    • Assign account to a ticket created with WebToCase

                                                                                                                      We use Zoho Desk. Our large client uses WebToCase form to submit tickets. I have two workflow rules: When a contact is created and its email ends with example.com, it runs a custom function, which assigns the new contact the right account Example with
                                                                                                                    • Introducing the Employee Portal for internal job posting

                                                                                                                      Employee referrals and internal applications are one of the most trusted hiring channels. But in many organizations, employees only hear about openings through messages, word of mouth, or after the role has already been open for a while. When employees
                                                                                                                    • Connect ZOHO social with Google Data Studio and download data from ZOHO social

                                                                                                                      Dear ZOHO team, I am writing this message to enquire about how to connect ZOHO social with Google data studio since our company would like to use Google data studio to generate reports. Is it a way to download data from ZOHO social? Best regards, Chris
                                                                                                                    • Marketing Tip #42: Keep policy pages updated and accessible

                                                                                                                      Policy pages may not be the most exciting part of your store, but they play a big role in building trust. Before buying, many customers look for information on shipping, returns, refunds, privacy, and terms. If these pages are missing, outdated, or hard
                                                                                                                    • Extend the Image Choice Field

                                                                                                                      Hi, The New Yes/No field is great for what it does, and the Image Choice Field is good but could be better with some functions from the Yes/No field. Take an example, rather than just Yes/No you want Yes/No/Maybe (Or more than 3 choices), but unlike the
                                                                                                                    • Migrate from Zoho Mail to G Suite

                                                                                                                      I am unable to find any documentation on how one can migrate from Zoho Mail to another platform, like G Suite or Office 365. Please point me to the right documentation. Thank you.
                                                                                                                    • Help: Capture full page URL in hidden field when same Zoho Form is embedded on multiple pages (iframe)

                                                                                                                      Hi all, Goal Use one Zoho Form across multiple pages and record the exact page URL (incl. subdomain + path + hash) where the user submitted it. Example pages: https://www.example.com/cargo/ https://www.example.com/cargo/containers/#contact https://cargo.example.com/auto/
                                                                                                                    • The All New Attendee App | Zoho Backstage

                                                                                                                      The Zoho Backstage attendee app is the primary touchpoint for attendees, speakers, exhibitors, and sponsors during an event. It helps participants access event information, manage their schedules, connect with other participants, engage with exhibitors
                                                                                                                    • Department Customization Copy/Paste

                                                                                                                      Hello! I love the new customization of the layouts, rules and templates! However, we have several "departments" that operate similar and as I'm updating either ticket layout or workflow rules, I'm finding that I have to do it in each department. I would
                                                                                                                    • Ticket status does not update upon layout change

                                                                                                                      Hi team, I'm encountering an issue with ticket layouts and Blueprints in Zoho Desk and would like to understand whether this is expected behavior or a bug. Scenario I have two ticket layouts: Helpdesk Integration The Integration layout has its default
                                                                                                                    • The 3.1 biggest problems with Kiosk right now

                                                                                                                      I can see a lot of promise in Kiosk, but it currently has limited functionality that makes it a bit of an ugly duckling. It's great at some things, but woeful at others, meaning people must rely on multiple tools within CRM for their business processes.
                                                                                                                    • "code":3001 ["Failed to update data."]

                                                                                                                      I would like to seek your expertise - I might be wrong on my approach also.. I highly appreciate your advice. 1 problem remains is when a new row was added on the existing one [from another form that trigger upon Successful form submission ], it gets
                                                                                                                    • Zoho Team Inbox - roadmap

                                                                                                                      Hi, would be good to understand the Teaminbox roadmap, in particular: 1. API / Zoho Deluge connections. We have a process where the each email needs to be either tagged or assigned daily. It would be great if we could automate a 5pm alert for any exemptions
                                                                                                                    • Zia Agents looks promising, but I still cannot deploy my first agent or connect WhatsApp after weeks of support tickets

                                                                                                                      Hi Everyone, I am posting here because I am stuck and need practical help from someone who has successfully deployed a Zia Agent with WhatsApp. Zia Agents looks like a very promising product. I have watched the platform expand quickly, and I have noticed
                                                                                                                    • Application-Level Save copy of sent emails

                                                                                                                      It would be really helpful to be able to turn on/off the Save copy of sent emails at a per application level, so some applications can save in the sent folder and others don't.
                                                                                                                    • how to get transcripts with speaker and time marks?

                                                                                                                      Hello, I downloaded the transcript of a recent meeting and noticed that the TXT file does not bring the speaker name and the time mark. Is there any way to make it happen using ootb resources from Zoho Meeting? best
                                                                                                                    • [IDEA] Bring Layout - Conditional Rules and Client Scripts to Zoho Books

                                                                                                                      The problem We run Zoho Books with two e-invoicing integrations: myData (Greek tax authority, AADE) and PEPPOL (EU e-invoicing). Between the two, our Invoice form carries a large number of custom fields — document type codes, VAT exemption categories,
                                                                                                                    • Don't send customer email when creating a ticket

                                                                                                                      Hi Is there an easy way to stop the system sending an email to the customer when we manually create ticket.
                                                                                                                    • You do not have sufficient permissions to perform this operation. Contact your administrator.

                                                                                                                      When I attempt to log a call I initiate the +New Call and Start Calling and I click Answered Call in the popup dialog box that follows. Any attempt to save or close this dialog box results in "You do not have sufficient permissions to perform this operation. Contact your administrator." The only way I can get the popup to disappear is to refresh the page and it will go away. I have found others reporting this issue when they attempt to run reports.  Any suggestions? Thank you in advance for taking
                                                                                                                    • Zoho CRM Layout Rules: Nine New Actions, Profile-Based Execution, and Interactive Preview

                                                                                                                      Hello everyone, Availability: This feature is now available for customers in the JP and SA DCs. It is planned to be released for other customers in soon. We’re excited to announce powerful new enhancements to Layout Rules in Zoho CRM - a feature built
                                                                                                                    • Zia Agents: quando a Inteligência Artificial do Zoho para de sugerir e passa a agir

                                                                                                                      Decidi criar um artigo com um panorama prático sobre o que são os agentes do Zia Agents, como funcionam de verdade dentro do ecossistema Zoho e o que aprendi implementando um agente de qualificação de leads em produção. De onde veio a idéia do artigo?
                                                                                                                    • Zoho Desk Android app update: Manage Custom Module records, View Record Counts for Sub Modules.

                                                                                                                      Hello everyone! We have introduced an option to add, edit and delete Custom Module records within the Zoho Desk Android app. Now, you can also view the record counts for sub modules (Time Entry, Attachments, Activities) in the ticket details screen. Please
                                                                                                                    • Automating CRM backup storage?

                                                                                                                      Hi there, We've recently set up automatic backups for our Zoho CRM account. We were hoping that the backup functionality would not require any manual work on our end, but it seems that we are always required to download the backups ourselves, store them,
                                                                                                                    • How to preserve Lead Creation Date, UTM parameters, and custom fields during Lead Conversion?

                                                                                                                      We are optimizing our MQL journey. When converting leads to contacts/deals, we need to ensure that the original system Lead Creation Date and UTM tracking parameters (Source, Medium, Campaign) are not lost or archived, as our teams require them for accurate
                                                                                                                    • Problem with currency field in Zoho CRM

                                                                                                                      Hi Guys Zoho Books has a feature in currency fields that automatically converts decimal numbers with commas ( , ) to period format ( . ) when pasting them. For example: R$ 2,50 --> R$ 2.50 Is this behavior available in Zoho CRM? I couldn't find any configuration
                                                                                                                    • Sub-projects

                                                                                                                      Hi,  Can we create a sub-project.   Client1 1. project1     1.1 sub-project1    1.2 sub-project2 2. project2    2.1 sub-project1    2.2  sub-project2
                                                                                                                    • Using Items from Books as product/plan Add-Ons

                                                                                                                      Hey, It'll be great to use Items from Books as product/plan Add-Ons. Ed
                                                                                                                    • Inspection Table

                                                                                                                      Hello Latha, We created a job sheet that includes the new table (Inspection Table) which was introduced recently. However, agents are not able to see the rows in the inspection table. Could you please investigate this issue and get back to us? Please
                                                                                                                    • Custom Button Creation from Layout Editor in Zoho CRM

                                                                                                                      Hello All, Buttons in Zoho CRM act as triggers that perform a specific action when clicked. Zoho CRM includes a set of system buttons that help you carry out common actions with a single click. Beyond these, your organization can create custom buttons
                                                                                                                    • Automatic login options for customer portal

                                                                                                                      The customer portal is nice for zoho subscriptions, but there are no options to automatically login to it, so if a user is logged into their account inside of my product, I can't create a link that will let them login to their dashboard. Could we have
                                                                                                                    • Square Payments for Subscriptions

                                                                                                                      I'd love to be able to use Square Payments for Subscriptions with my customers. I already use it for Zoho Books Please have this considered. It would really help my business
                                                                                                                    • Next Page