Overview
To improve account security and protect sensitive reservation data, Cloudbeds now requires an additional identity verification step when exporting reservations from the Cloudbeds Reservations page.
This security enhancement uses Step-up Authentication, which asks users to confirm their identity before completing sensitive actions.
Once verified, users remain trusted for 8 hours before another verification is required.
What is Step-up Authentication?
Step-up Authentication is an additional security check that requires users to verify their identity again before completing sensitive actions.
Even if a user is already logged into Cloudbeds PMS, they may be prompted to confirm their identity using a supported authentication method before the export is allowed.
Important security information
This helps reduce the risk of unauthorized access if:
- A session is compromised
- Credentials are stolen
- A logged-in device is accessed by someone else
Check How to Use an Authenticator App for Multi-Factor Authentication (MFA) if you have doubts about authentication.
Which actions require Step-up Authentication?
The following action currently requires additional verification:
- Exporting reservations from the Reservations page
How it works
When attempting to export reservations:
- Click the export option
from the Reservations page
- Cloudbeds checks whether the user has completed Step-up Authentication within the last 8 hours
- If verification is required, the user is prompted to confirm their identity using the authentication method used in their login.
- After successful verification, the export proceeds normally
- The user remains trusted for the next 8 hours
Supported verification methods
Depending on the user's account configuration, verification may be completed using:
- Authenticator app (TOTP)
- Push notification
- WebAuthn or security key
- SMS verification
- Voice verification
- Email verification
Check How to Use an Authenticator App for Multi-Factor Authentication (MFA) if you have doubts about authentication.
Why this change matters
Reservation exports may contain sensitive guest and operational information. Step-up Authentication helps protect that data by adding an additional layer of security before exports are generated.
Benefits include:
- Reduced risk from compromised sessions
- Protection against unauthorized exports
- Stronger account security
- Minimal workflow disruption with an 8-hour trust window
Frequently Asked Questions
No. After successfully completing Step-up Authentication, you will remain trusted for 8 hours.
Yes. This security enhancement applies to all Cloudbeds plans and users with access to reservation exports.
The export action will not proceed until identity verification is completed successfully.
No. This is a mandatory security enhancement designed to protect customer data.
Comments
Please sign in to leave a comment.