# 2FA for New SaaS Sub-Accounts > New SaaS sub-accounts can be asked to complete 2 Factor Authentication before they can purchase any phone numbers. TABLE OF CONTENTS Use Case How it… - Source: https://docs.ghlcustomercare.com/docs/saas-configurator/saas-mode/2fa-for-new-saas-sub-accounts - Section: SaaS Configurator / Saas Mode - Reading time: 1 min - Images: 3, each explained below --- New SaaS sub-accounts can be asked to complete 2 Factor Authentication before they can purchase any phone numbers. **TABLE OF CONTENTS** - [Use Case](#use-case) - [How it works?](#how-it-works) - [Bypassing 2-Factor Authentication](#bypassing-2-factor-authentication) --- ## Use Case Protecting SaaS agencies from scammers who use VoIP numbers and disposable email IDs to create multiple sub-accounts. ## How it works? 1. Agencies can enable 2FA for newly signing-up SaaS sub-accounts from **_SaaS Configurator > Advanced Settings > 2-Factor Authentication_**. ![Step 1 of 3: Agencies can enable 2FA for newly signing-up SaaS sub-accounts from…](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/155043388191/original/71LNHYYO9fPeOuIfIHqXTAzdqpLyPgAzoA.png) **Step 1 of 3: Agencies can enable 2FA for newly signing-up SaaS sub-accounts from…** This screenshot accompanies step 1 of 3 in the "How it works?" section of "2FA for New SaaS Sub-Accounts". At this point in the walkthrough you agencies can enable 2FA for newly signing-up SaaS sub-accounts from SaaS Configurator > Advanced Settings > 2-Factor Authentication. The navigation path used here is SaaS Configurator > Advanced Settings. The next step is to when the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. - Path: SaaS Configurator > Advanced Settings - What this covers: Agencies can enable 2FA for newly signing-up SaaS sub-accounts from SaaS Configurator > Advanced Settings > 2-Factor Authentication. - Next: When the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. Full procedure: 1. Agencies can enable 2FA for newly signing-up SaaS sub-accounts from SaaS Configurator > Advanced Settings > 2-Factor Authentication. <- this image 2. When the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. 3. They can proceed to purchase phone numbers after the 2FA is successfully completed. 2. When the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. ![Step 2 of 3: When the clients tries to purchase a phone number for the first time…](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/155013478151/original/nIRphKVFHbJ9TUBBTVMuJjz_UOOtLlfuOg.png) **Step 2 of 3: When the clients tries to purchase a phone number for the first time…** This screenshot accompanies step 2 of 3 in the "How it works?" section of "2FA for New SaaS Sub-Accounts". At this point in the walkthrough you when the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. The navigation path used here is SaaS Configurator > Advanced Settings. The next step is to they can proceed to purchase phone numbers after the 2FA is successfully completed. - Path: SaaS Configurator > Advanced Settings - What to fill in: When the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. - Next: They can proceed to purchase phone numbers after the 2FA is successfully completed. Full procedure: 1. Agencies can enable 2FA for newly signing-up SaaS sub-accounts from SaaS Configurator > Advanced Settings > 2-Factor Authentication. 2. When the clients tries to purchase a phone number for the first time, the sub-account admin is asked to enter an SMS enabled phone number which will then get a verification code that they have to enter. <- this image 3. They can proceed to purchase phone numbers after the 2FA is successfully completed. 3. They can proceed to purchase phone numbers after the 2FA is successfully completed. A phone number can NOT be used to create/verify another sub-account till 7 days after it has been used to verify a sub-account. ## Bypassing 2-Factor Authentication 1. There is no way for a sub-account admin to bypass the 2FA. 2. Agency admins will have the option to manually verify a sub-account (without any code) from the sub-account's Manage Client page. ![Step 2 of 2: Agency admins will have the option to manually verify a sub-account…](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/155013478357/original/ENsTpAonx1Bv_hYpnxY0-t5JQ2K69sNzSw.png) **Step 2 of 2: Agency admins will have the option to manually verify a sub-account…** This screenshot accompanies step 2 of 2 in the "Bypassing 2-Factor Authentication" section of "2FA for New SaaS Sub-Accounts". At this point in the walkthrough you agency admins will have the option to manually verify a sub-account (without any code) from the sub-account's Manage Client page. - What this covers: Agency admins will have the option to manually verify a sub-account (without any code) from the sub-account's Manage Client page. Full procedure: 1. There is no way for a sub-account admin to bypass the 2FA. 2. Agency admins will have the option to manually verify a sub-account (without any code) from the sub-account's Manage Client page. <- this image --- Documentation for GHL Customer Care. Support: support@ghlcustomercare.com