This article explains the different authentication methods available in AWARD®, and how they support different security requirements.
AWARD® supports three authentication methods: Standard authentication, Multifactor Authentication (MFA), and Single Sign‑On (SSO).
Standard Authentication
Standard authentication is the default login method in AWARD®. Users sign in using a username and password.
Each AWARD® tenant includes a range of configuration options that can be used to strengthen this approach, such as password rules and account controls.
While simple to use, standard authentication relies entirely on the secrecy of the username and password. If those credentials are guessed, reused, or compromised, an unauthorised user may be able to access the account.
Multifactor Authentication (MFA)
Multifactor Authentication adds an extra layer of security on top of a username and password.
With MFA enabled, users must provide at least two forms of verification when signing in. This usually means:
- Something they know (their username and password), and
- Something they have (such as a one‑time code generated by an authenticator app).
This significantly reduces the risk of unauthorised access. Even if a password is compromised, the account cannot be accessed without the additional factor.
Single Sign On (SSO)
Single Sign‑On allows users to access AWARD® using an external identity provider, such as their organisation’s existing login system.
With SSO:
- Users sign in once using their organisation’s credentials
- They do not need a separate AWARD® username and password
- Access is managed centrally through the external provider
SSO typically includes MFA as part of the external login process, providing both convenience and strong security.
Enabling MFA or SSO
Multifactor Authentication and Single Sign‑On are not enabled by default.
If you would like to use MFA or SSO for your AWARD® tenant, please contact the Commerce Decisions Customer Success team to discuss your requirements.