the Exym authentication changes.
Feel free to edit however you want. All screenshots should be here -- train or announce however you think is best. IT can be available to assist with triaging any issues and answering tickets once this goes live.
It is already set up and can be turned on in a day, so just let me know when ready.
(background)


Question pop up looks like below, user will put in their email address and will get a
Code (and a link) sent to their SFVCMHC email ONLY. People may think this is weird or some kind of scam, so this
will need to be explained. Note that the branding is CLOUDFLARE ACCESS. This is the company
Exym is using to provide this. (They may be able to change the branding once it is out of BETA)

Email will look like below: (NOTE: it comes from cloudflare NOT EXYM. Cloudflare is the company they are using to provide this functionality)

End user can click the link above OR manually enter the code in the box, which looks like this:

Once they hit sign in, if the code is correct they will redirect to the normal log in screens.
Additional notes:
You will only get this ONCE A WEEK or if you switch computers/browsers. NOT every time you log in.
Once a code is requested, you have 10 minutes to enter it or you will need to get a new one by restarting process.
It is ALL or NOTHING. You cannot enable this for only certain users, it is the whole site or not at all. I think they have done a good job balancing annoyance/security, which is always an issue. Enabling this will also open up the possibility of relaxing password expiration or complexity, as well.
Any questions or thoughts, let me know.
Steve
Also, any Exym user that does not have a sfvcmhc email address, like contractors, need to be added manually by Exym, so Steve needs to be notified.