Rewards Multi-Factor Authentication (MFA)

WorkTango is committed to maintaining the highest standards of security for your Employee Rewards. To provide enhanced protection against unauthorized access, particularly for our non-SSO customers using auto-approval in the Rewards Marketplace, we've implemented Multi-Factor Authentication (MFA) for all gift card orders. This added security layer ensures that only authorized employees can redeem their valuable Rewards, safeguarding your organization and your team.

Customers using manual admin approval workflows will see no change.

Feature Description

Rewards MFA introduces a verification step for gift card orders. Here's how it works:

1. Order Placement: When an employee places a gift card order, they will be redirected to their WorkTango dashboard rather than immediate auto-approval.
2. Action Item Notification: An action item will appear on the dashboard, prompting the employee to verify their order via their registered WorkTango user email address.
3. Verification Email: An email containing a unique verification link will be sent to the employee's registered WorkTango user email address. This email is sent from noreply@worktango.com. This link must be clicked within 30 days to verify the order. If an employee does not verify their order within 30 days, then the Reward must be approved by an admin user.
4. Verification Process: Clicking the link directs the employee to a confirmation page within WorkTango, verifying the order's processing.
5. Gift Card Delivery: After successful verification, the gift card details and challenge code will be sent in a separate email to the shipping email address provided during checkout.

Important Considerations

• The verification link is sent to the employee's registered WorkTango user email address.
• If an employee lacks a registered WorkTango user email address (e.g., uses a temporary email), the organization must provide one, or the order will require manual admin approval.
• The gift card code is sent to the shipping email provided at checkout, which may differ from the registered WorkTango email.
• Employees have 30 days to verify their order.
• All items within the order require verification.
• Merchandise-only orders will not trigger the MFA process and will be auto-confirmed.

Troubleshooting Verification Issues

Rarely, WorkTango users might encounter an error when attempting to verify their order. See below for the types of errors users might encounter, and what administrators or employees can do to resolve the issue and complete verification.

Expired Verification Link: 

• Error Message: "This verification link has expired. Please reach out to your HR administrator to request manual approval for your reward."
• Employee Action: Contact your HR administrator for assistance.
• Administrator Action: Navigate to WorkTango’s Administrator Rewards Moderation page, search for the order, and approve it on the employee’s behalf.

Previously Clicked Verification Link:

• Error Message: "Your reward redemption has already been verified and should be on its way to the email address provided at checkout."
• Employee Action: Check the email address you provided during checkout for an email containing the gift card details and challenge code. This comes from noreply@worktango.com. If you cannot find the email, contact WorkTango Support for assistance (customersupport@worktango.com).
• Administrator Action: None.

Admin Approved/Denied Reward:

• Error Message: "This verification link is no longer valid: Please reach out to your HR administrator to check the status of your reward redemption."
• Employee Action: Contact your HR administrator for the current status.
• Administrator Action: Confirm that you have already verified the order on the employee’s behalf. If additional support is needed, contact WorkTango Support for assistance (customersupport@worktango.com).

General Verification Failure:

• Error Message: "This verification link is not valid. Please try again."
• Employee Action: Retry clicking the link. If the problem persists, contact WorkTango Support for assistance (customersupport@worktango.com).
• Administrator Action: None.

FAQ

Q: Why was MFA implemented?

A: MFA adds an extra layer of security to protect Employee Rewards from unauthorized access.

Q: Who is the sender for the Rewards verification email?

A: This email is sent from noreply@worktango.com.

Q: What happens if an employee doesn't have a registered WorkTango user email address?

A: The organization must add a valid email address for the employee, or the order will require manual admin approval.

Q: Once verified, where is the gift card information sent?

A: The gift card details and challenge code are sent to the shipping email address provided during checkout.

Q: How long do employees have to verify their orders?

A: Employees have 30 days to verify their orders. If an employee does not verify their order within 30 days, then the Reward must be approved by an admin user.

Q: Does this affect customers using manual admin approval?

A: No, customers using manual admin approval will see no change.

Q: Is this process different for employees who use the WorkTango mobile app?

A: The verification link is sent to the employee's registered WorkTango user email address whether the gift card is redeemed via web or mobile. However, mobile users will not see the action item.

Q: Are merchandise orders affected?

A: No, merchandise-only orders will not trigger the MFA process and will be auto-confirmed.

Q: How can I opt out of Rewards multi-factor authentication?

A: Rewards MFA is required for all gift card redemptions unless your organization uses Secure Sign-On (SSO) to log in to WorkTango. 

To opt out of Rewards MFA, you can implement SSO. Please contact upgrades@worktango.com and include your SSO provider details to schedule a 30-minute SSO setup call.

• Note: WorkTango does not charge a fee to implement SSO
• All employees need to be under the same SSO provider.

More Questions?

Do you have a question that wasn't covered in this article? Let us know! Email your question(s) to engagement@worktango.com.