QUESTION  Why has the File Protection authentication method for partners changed?

ANSWER  To allow Single Sign-On to your Datto services, and for consistency and convenience.

This brings you closer to a single login experience for all Datto products and delivers many of the requested benefits that already exist within Datto SSO.

This change was made based on feedback from our File Protection partners:

  • Partners overwhelmingly agree on using 2FA to protect their File Protection solution. Most of the concerns were about usability and 2FA features in Datto File Protection.
  • Our partners requested additional 2FA options, most commonly Push notifications.
  • Our partners much prefer a unified process for multiple Datto products.
  • Our partners also requested federated security options like Microsoft ADFS and OKTA.

QUESTION  What is the impact of this change?

ANSWER  Manager users will be redirected to the Datto Partner Portal to authenticate.

To access your File Protection Manager account, you'll authenticate via auth.datto.com first. If you have an active SSO session after having accessed another Datto service, however, you will be logged in to your File Protection Manager account without further authentication.

If your email address is associated with multiple File Protection Manager and/or File Protection Manager accounts, you will be able to select one before being redirected to your Datto File Protection platform.

QUESTION  What are the benefits of this change?

ANSWER  A consistent authentication method for Datto products.

  • SSO will offer our partners centralized security. A single user change can lock them out of all Datto products.
  • SSO will offer a better cross-product experience. Users will be able to jump from one Datto product to another without having to re-authenticate.
  • SSO will allow us to integrate with other authentication providers in a single place in the future, rather than having to do it for all our products separately.

QUESTION  Why has File Protection implemented mandatory two-factor authentication (SSO)?

ANSWER  We just want to keep you and your customers' data secure.

As File Protection Manager allows you to access confidential user data; secure access to your File Protection Manager account is paramount!

Based on partner feedback, we've decided to move to mandatory two-factor authentication (2FA) for Datto File Protection. Your supportive responses leave us confident that mandating 2FA for File Protection is the appropriate action to keep our partners and your end clients secure.

QUESTION  What 2FA options will be available in File Protection Online?

ANSWER  A variety of options are available.

Users can authenticate using Time-based One-time Password (TOTP). TOTP is most commonly used with tokens generated by Google Authenticator, Microsoft Authenticator, DUO, Lastpass, Authy, Myki or others.

QUESTION  Can I reset a user's 2FA?

ANSWER  Partner Portal user with Security Admin control can reset 2FA for other users.

Click here to find out how to reset a users 2FA.

QUESTION  Do I need to go to the Datto Partner Portal to log in to Datto File Protection?

ANSWER  You can continue to log in via the File Protection login page or the Datto Partner Portal.

Users can login via https://fileprotection.datto.com/manager/login (or https://fileprotection.datto.com/login). You will simply be redirected to the Datto Partner Portal to authenticate after entering your username in the login screen.

QUESTION  How does this impact linked accounts in File Protection (and File Protection)?

ANSWER  Linked accounts remain unchanged.

Linked accounts continue to function as they have before. When accessing a File Protection Manager account, you will be redirected to the Datto Partner Portal to authenticate.

Learn how to Manage Multiple Linked Accounts.

QUESTION  I don't have a phone to use for 2FA. What do I do?

ANSWER  Use a TOTP desktop application

There are various solutions that support TOTP in a desktop application. Applications like Authy and Myki can be configured to generate tokens for you without the need for an app on a phone, either via a Desktop or Browser app.

QUESTION  What changes can I expect in File Protection Manager?

ANSWER  Manager users policies have been removed

As all authentication is handled by the Datto Partner Portal, the security policies for Manager login are no longer useful and have been removed.