How to use the 2-Step Verification feature in Glooko® Population Tracker

The 2-Step Verification feature allows your clinic to require two forms of authentication for your Professional users accessing your Population Tracker. This adds another layer of security for your clinic and your patient data. Once enabled for an account, only the Professional-Admin user may disable or enable 2-Step Verification for the account's Professional users.

If 2-Step Verification is required for your clinic, Professional-Admin users may only choose to reset the preferred 2-Step Verification method. 

• Setting up your 2-Step Verification 
• Resetting your 2-Step Verification (Professionals & Professional-Admins) 
• Managing 2-Step Verification (Professional-Admins only) 

NOTE: To have the 2-Step Verification feature enabled for your clinic, please contact your Glooko account representative directly or email help@glooko.com.

Setting up your 2-Step Verification 

As a Professional or Professional-Admin user, the first time you login to your Glooko account, you will be prompted to configure your preferred 2-Step Verification method if required by your clinic. There are two options for receiving your one-time passcode you may select from: 

• Receive passcode via Glooko account email 
• Receive passcode via authenticator app 

To configure your 2-step verification for the first time: 

• Login or Activate your Glooko account 
• After entering your password, you will be prompted to select App Authentication or Email Authentication
  • App Authentication will require you to use an authentication app, such as Google Authenticator, or similar, to receive your passcode
  • Email Authentication will mean your passcode will be delivered via email to your Glooko account email 
• If you select App Authentication: 
  • The next screen will present you a QR code and a Secret Key 
  • Either scan the QR code from your authentication app or enter the Secret Key to complete the setup 
  • Once configured, enter the 6-digit passcode provided by the app to login to your Glooko account
• If you select Email Authentication: 
  • Glooko will generate an email to your Glooko account email address
  • Open the email and enter the 6-digit passcode contained within the email 

You will only need to configure your verification method once, during your initial login. If you decide to change your preferred method, you may do so by following the instructions below. 

How to reset your 2-Step Verification method 

You may reset your own preferred 2-Step Verification method at any time from within your Glooko account. 

To edit your 2-Step Verification: 

1. Click the drop-down menu at the top-right of your Population Tracker. 
2. Select Settings
3. In the Account section, select Reset 2FA. 
4. On the pop-up screen, select Confirm. 

Once this has been confirmed, the next time you login to your Glooko account, you will be guided through the setup process, allowing you to change your preferred method of receiving one-time passcodes. 

How to manage 2-Step Verification (Administrative users)

If you're an Administrative user, you have the ability to turn 2-Step Verification on and off for each user at your clinic. 
Please note:  If your clinic requires 2-Step Verification, Professional-Admin users will not be able to able to disable it for their users. 

To manage 2-Step Verification:

1. Click the drop-down menu at the top-right of your Population Tracker.
2. Select Manage Clinic.
   
   
3. On the Professional Users tab, in the 2-Step Verification column, click to toggle this setting on (to the right) for each user.
   
   
4. When prompted if you'd like to continue, click Enable 2-Step Verification.
   • After enabling, the user will be prompted to configure their preferred method during the sign-in process on my.glooko.com
   • After logging into his or her Population Tracker account, the user will receive a six-digit, one-time password (OTP) via their preferred method. When prompted, the user must enter that OTP on my.glooko.com then click Continue.
   • • The user can place a checkmark () beside Don't ask again to save the OTP on his or her browser for 30 days; otherwise, he or she will be prompted to complete the verification process each time upon logging into Population Tracker.
       
       NOTE: The OTP is only valid for five (5) minutes after being sent via email. If the OTP expires, the user can request that a new password be emailed by clicking Resend OTP.
       
       

NOTE: To disable 2-Step Verification for a user, simply click to toggle this feature off (to the left). That user will no longer be required to verify his or her account upon login.  

To reset a user's 2 Step-Verification method: 

1. Click the drop-down menu at the top-right of your Population Tracker. 
2. Select Manage Clinic
3. On the Professional Users tab, select the Reset button in-line for the appropriate user. 
4. On the pop-up screen, select Confirm. 

Once this has been confirmed, the next time the user logs into your clinic's Glooko account, they will be guided through the initial setup process, allowing them to choose their preferred method for receiving one-time passcodes.