Yes. Castor fully supports Two-Factor Authentication (2FA) using any time-based one-time password (TOTP) authenticator app (such as Google Authenticator, Microsoft Authenticator, or Authy).
2FA can be enabled or enforced at three levels:
-
User Account Level (Individual):
- Any user can enable 2FA on their own account at any time in Account Settings > Password & Security.
- For step-by-step setup instructions, see Helpdesk: Two-factor authentication in CDMS.
-
Study Level (Enforced by Study Admin):
- Study Administrators can require all users to have 2FA enabled before they are allowed to access a specific study. If enforced, users without 2FA active will be prompted to set it up upon opening the study.
-
Institutional / Domain Level (Enforced by Castor):
- Institutions can enforce mandatory 2FA for all accounts registered under their organization's email domain (e.g.,
@yourinstitution.org). - To enable domain-wide enforcement, your authorized institutional representative can submit a request to support@castoredc.com with the list of email domains.
- Institutions can enforce mandatory 2FA for all accounts registered under their organization's email domain (e.g.,
Need Help?
Switching devices or lost your authenticator?
Learn how to transfer or reset your 2FA in Helpdesk: I use two factor authentication and have a new device: EDC/CDMS.
Questions?
Contact Castor Support at support@castoredc.com.