Security Updates (August 24, 2023)

Big news! Fuse Workforce Management is implementing new security measures this year to keep your organization safe and protected 24/7.

Overview

On August 24, 2023, Fuse Workforce Management is implementing new security measures to keep your organization safe and protected 24/7. These security measures include changes to passwords and multifactor authentication (MFA) requirements.

All users logging in on August 24th whose settings do not meet the new password or MFA requirements will need to update them upon their first login. These updates will not affect Single Sign-On logins, Webclock (.clock), or Applicants (.careers).

Please take a look at the following information on the specifics and tools to help you prepare for these updates.

New Password Requirements

All Passwords must be between 15-64 characters in length
You will not be able to reuse any of your latest 24 passwords
Passwords will expire at least every 180 days
Inactive Employees will be automatically locked if they haven't logged in within 180 days
New accounts will be automatically locked if they haven't logged in within 30 days of account creation

Multifactor Authentication (MFA) Updates

Authenticator App
- You will now be able to use an authentication app instead of waiting for a text message or email!
- If you select the authenticator app option, you must download an app to your mobile device, such as Google Authenticator or Microsoft Authenticator. These apps are available in the Apple Store or Google Play Store.
Recertification every 4 hours
- The Remember Me option will reset after four hours. This means that after you have entered your MFA token once, you will be required to enter it again if you attempt to log in over four hours later.
Text and Email No longer available options
- Text and Email are no longer available options for multifactor authentications. This will save time when employees have issues waiting for texts and emails and will also reduce the risk associated with these less secure methods.

Default Password & Password Reset Updates

Employee Social Security Numbers are no longer an option for default temporary passwords
Passwords will use a random unique generation or a custom default
This will affect:
- Default Passwords for New Accounts
- Admin/Manager Password Reset Functionality
Review your Notification settings to ensure these changes are applied appropriately. Go to Admin > Global Setup > Notifications to review any password instructions. The most common Notification event types to include password instructions are:
- Account Created
- Checklist Created
- Password Reset

Early Adoption Encouraged by Fuse

We encourage all clients of Fuse to consider early adoption of these security updates, as opposed to waiting until the changes are enforced for all users on August 24th, 2023
Fuse is prepared to guide you on how to implement these changes for your company as soon as you are ready.
Please get in touch with support@fuseworkforce.com if you would like to be an early adopter!

Tools to Assist

We have created some tools to help you prepare for these updates.