Multi-Factor Authorization enhancements

Prev Next

Mandatory Workflow Change

This change will automatically apply to all customers who have this feature enabled at the time of this release. Review the changes below.

Multi-Factor Authorization enhancements

Two improvements to multi-factor authentication (MFA) make enforcement easier to plan for and easier to absorb: an export of the MFA user list so you can see who is ready, and a 15 minute countdown reminder so nobody is signed out mid-task.

Available inCore
Feature type
Enhancement
Industry
All business types
Roles
AdministratorsOffice employees
Region
All regions

What's changing

Previously, preparing for multi-factor authentication (MFA) enforcement meant working blind at both ends. No single screen showed employees, their roles, and their MFA status together, so administrators building a readiness list retyped names and phone numbers into a spreadsheet by hand. And when enforcement reached an employee who had not yet set up a verification method, that employee was signed out of ServiceTitan right away, with no warning and no chance to save open work. Now, the MFA screen has a comma-separated values (CSV) export button that produces a file with each employee's display name, username, MFA type, user type, status, role, and phone number, matching whatever filters you have applied on screen. And any employee who still reaches enforcement without a verification method sees a reminder banner across the top of the screen with a 15 minute countdown, explaining that MFA is being turned on and that a sign-out is coming. When the countdown ends, a short message appears, the employee selects OK, and the session ends. At the next sign-in, the employee sets up a text message code or an authenticator app, then continues into ServiceTitan.

Workflow comparison — before & after

← Before
✓ After
1.An administrator preparing for multi-factor authentication (MFA) enforcement opens the MFA screen to see who is ready.
1.An administrator opens the multi-factor authentication (MFA) screen and filters the list to the employees they want to review.
2.The screen shows status but offers no way to pull it out, so the administrator retypes names, roles, and phone numbers into a spreadsheet by hand.
2.The administrator selects the comma-separated values (CSV) export button, and a file downloads containing the display name, username, MFA type, user type, status, role, and phone number for every row matching the filters on screen.
3.Enforcement arrives before the readiness list is finished.
3.The administrator filters that file for employees with MFA disabled or no phone number, and sends the readiness report on.
4.Employees who are not ready are signed out of ServiceTitan the moment enforcement is applied, losing any work that was not saved.
4.Any employee who still reaches enforcement without a verification method sees a reminder banner with a 15 minute countdown, and saves open work before the session ends.
5.Those employees contact the administrator or Support to find out whether their accounts are locked.
5.At the next sign-in, that employee sets up a text message code or an authenticator app, then continues into ServiceTitan.
⚠ Administrators cannot see who is unprepared, office staff lose work in progress, and a planned security change is experienced as an outage.
✓ Administrators can see exactly who is unprepared and act before enforcement, and the employees who are caught out get time to save their work instead of losing it.

How it works for your industry

Residential Service and Replacement
  • An office manager exports the multi-factor authentication (MFA) list before enforcement, filters the file for staff with no phone number on record, and collects numbers at the Monday meeting.
  • A dispatcher is halfway through rebuilding tomorrow's board when enforcement reaches the account. The countdown gives them time to save the schedule before signing out.
  • A customer service representative (CSR) is on a call booking a no-heat visit. The banner appears, so they finish the booking and confirm the arrival window before the session ends.
Commercial Service and Replacement
  • An operations administrator filters the multi-factor authentication (MFA) screen to office roles, exports the list, and reports readiness by department to their director.
  • An account coordinator is building a multi-site preventive maintenance (PM) schedule when the reminder appears. They save the schedule rather than rebuilding it after signing back in.
  • A billing specialist is applying payments across several buildings. The countdown lets them finish the batch before MFA setup begins.
Residential Construction
  • A business administrator exports the multi-factor authentication (MFA) list each month alongside their other standing reports, and tracks setup as a running number rather than a scramble.
  • A project coordinator is entering change order details when enforcement is applied. The countdown lets them save the change order first.
  • A purchasing agent is releasing material orders for a framing start. The banner gives them time to submit the orders before signing out.
Commercial Construction
  • A controller exports the multi-factor authentication (MFA) list, filters for staff holding financial permissions, and confirms every one of them is set up ahead of enforcement.
  • A project accountant is assembling a progress billing package when the reminder appears. The countdown lets them complete and save the package.
  • A project manager (PM) is approving subcontractor invoices. They finish the approvals during the countdown rather than starting over.
Roofing and Exteriors
  • An office administrator exports the multi-factor authentication (MFA) list before a storm season hiring push, and confirms new office staff are set up before enforcement reaches them.
  • An estimator is finishing a tear-off and re-roof proposal when enforcement reaches the account. The countdown lets them send the proposal first.
  • A supplement specialist is entering insurance supplement line items. They save the supplement during the 15 minute window.

How to prepare

01
Confirm the administrators who will build your readiness report have the View MFA permission, which controls access to the multi-factor authentication (MFA) screen and the export.
02
Export the MFA list and identify the employees who do not yet have a verification method set up, so you know who is affected.
03
Confirm those employees either have a verified mobile phone number on file or are ready to install an authenticator app, so setup goes quickly at the next sign-in.
04
Train your office staff on what the reminder banner means: it is a planned security change, not an error, and the countdown is time to save work.
05
Bookmark any knowledge base articles or Academy videos for team training.