Descartes® is pleased to announce the latest release of Pacejet. This update includes various improvements designed to enhance security and related user experience. Below, you'll find a summary of the changes implemented in this version. For any questions about specific items, please contact Descartes Customer Support.
Phased Rollout of New Required Multi-Factor Authentication (MFA)
Multi-factor authentication (MFA) adds an extra step when you sign in to Descartes Pacejet™. In addition to your username and password, you confirm your identity using a one-time code sent to your email or mobile phone. This protects your account if your password is guessed, reused elsewhere or shared. Descartes is moving incrementally to a future state where all Pacejet users will use MFA for all user accounts.
As part of rolling out MFA, the Descartes Pacejet team will enable MFA Readiness in controlled phases across customer portals. When this release is initially published, users should experience no change in behavior at first. Instead the release puts in place tools that will enable a phased activation of enhanced MFA on a portal-by-portal basis.
When your location is included in a phase, you will be notified, and the MFA Readiness will be activated. Your users will then begin to see the new guided setup experience for verifying their email or mobile phone. This setting also controls when mobile phones will be accepted for entry. Until MFA Readiness is turned on for your portal, your existing sign-in experience will remain unchanged, and the new MFA user interface will not be visible.
The following articles provide additional information:
New Features
Mobile Phone Number for Multi-Factor Authentication (MFA)
🟨 New Feature: The Pacejet User Administration page now supports entering mobile phone numbers to receive MFA codes.
🟨 New Feature: Individual users can now select a preferred method of authentication, mobile phone or email, for MFA codes.
🟨 New Feature: Multiple user accounts with distinct user names and passwords can share the same email or mobile phone. This can help administrators who wish to manage or distribute login codes while still retaining the extra security of requiring username, password, and an MFA code.
Enhancement
Guided User Experience to Setup Preferred Verification Method
🟪 Enhancement: When users log in and have not selected a preferred MFA verification method, a one-time menu appears to guide them through the setup. For convenience, users can select Skip for Now, and they will be re-prompted in the future. If ready, they can enter a Mobile Phone or Email, select a preferred method, and click Save and Verify. After verification, users will no longer see this menu on future logins.
Bug Fix
No bug fixes are included in this release.