Security & 2FA
Account security matters. Resplendent Data provides Two-Factor Authentication (2FA) and session management to protect your data.
Two-Factor Authentication (2FA)
Section titled “Two-Factor Authentication (2FA)”We recommend enabling 2FA for all users. It requires a 6-digit code from your phone every time you sign in.
Setting up 2FA
Section titled “Setting up 2FA”- Click your User Profile menu (top right)
- Select Security
- Click Enable Two-Factor Authentication
- Scan the QR code with your authenticator app (Google Authenticator, Microsoft Authenticator, Authy, etc.)
- Enter the 6-digit verification code
- Save your recovery codes!
Using 2FA recovery codes
Section titled “Using 2FA recovery codes”If you lose your device:
- On the 2FA login screen, select Use Recovery Code
- Enter one of your unused 10-digit codes
- Once logged in, disable and re-enable 2FA to set up your new device
If you have no recovery codes and cannot log in, ask an admin to disable 2FA for your account from Settings → Team & Access. You can then re-enable it from your profile.
Switching authenticator devices
Section titled “Switching authenticator devices”- Open Profile → Security
- Click Disable Two-Factor Authentication
- If your Company requires 2FA, you are immediately sent back to the setup flow
- Scan the new QR code and save the new recovery codes
Require 2FA for the Company
Section titled “Require 2FA for the Company”Company admins can require 2FA for all email/password users:
- Go to Settings → Team & Access
- Click User settings
- Turn on Require two-factor authentication
- Confirm the change
When this is on:
- Email/password users without 2FA must complete setup before using the app
- Microsoft SSO users are not required to set up Resplendent 2FA
- Users can still disable and re-enable 2FA to switch devices; they are redirected into setup again immediately
- Admins can still disable another user’s 2FA to recover lockouts; that user must re-enroll before continuing
You must already have 2FA enabled on your own email/password admin account (or sign in with Microsoft SSO) before you can turn the Company requirement on.
Session management
Section titled “Session management”- Auto-logout: Sessions expire after inactivity
- Active sessions: View all devices logged into your account from the Security tab. Revoke access to unrecognized devices instantly.
Password requirements
Section titled “Password requirements”Passwords must:
- Be at least 10 characters
- Include uppercase, lowercase, numbers, and symbols
- Not be a previously used password
Enterprise security features
Section titled “Enterprise security features”Higher tiers offer additional protections:
Microsoft sign-in
Section titled “Microsoft sign-in”Any user can sign in or create an account with a personal or work Microsoft account using Continue with Microsoft on the sign-in and sign-up pages. This is available on every subscription tier.
Microsoft sign-in handles authentication only. Resplendent does not use Entra ID groups, roles, or other directory attributes to control access in the app. After someone signs in with Microsoft, their Resplendent role, dashboard groups, dataset permissions, and feature permissions are still managed only in Settings → Team & Access.
Company-managed Microsoft SSO
Section titled “Company-managed Microsoft SSO”Starship Company administrators can connect their organization’s Microsoft tenant from Settings → Team & Access → User settings. A verified connection helps employees find the Company when they sign up or sign in with Microsoft. Administrators still approve every access request.
Once connected, administrators can require Company users to sign in through that tenant, with per-user exceptions for contractors or other special cases. Connect your own Microsoft account before turning on the requirement for the Company.
Audit Logs
Section titled “Audit Logs”Available on Business and higher. Detailed history of every action in your account: data exports, configuration changes, user access.