When setting up or managing user accounts in the portal, selecting the appropriate Authentication Method determines how users log in and how their access is secured.
Below is an overview of the available login methods, their security levels, and when to use each.
1. Two-Factor Authentication
Security Level: High
How It Works: In addition to entering a standard email and password, the user must verify their identity using a second factor generated by an authenticator app.
When to Use: Best practice for all users. This method adds a crucial layer of security, protecting accounts against unauthorized access even if a password is compromised or leaked.
2. Email and Password Only
Security Level: Low / Moderate
How It Works: Users log in using only their registered email address and a single password.
When to Use: Recommended only for low-risk accounts where two-factor authentication or SSO cannot be configured. Because password-only logins are vulnerable to phishing and brute-force attacks, this method is discouraged for standard operational use.
3. Single Sign-On (SSO) User
Security Level: Enterprise Grade
How It Works: Users log in using their central enterprise identity credentials managed by their organization rather than a separate password for this portal.
When selecting SSO User, you will need to select the SSO Provider from the dropdown list.
Marriott EID (Not mandatory)
Entering the EID maps the user's portal account directly to their official Marriott corporate profile is not required, but can be added if known.
After the first login, the system will gather these details automatically.