Multi-Factor Authentication

Agent Cake supports Time-based One-Time Password-based MFA (TOTP) and can provision access even in apps where MFA is enforced.

What Type of MFA Is Supported?

Agent Cake currently supports TOTP-based MFA, such as codes generated by apps like Google Authenticator or Microsoft Authenticator.

Agent Cake generates the code itself from a shared secret. It cannot approve a push notification, a phone prompt or a hardware key. Any account it signs in with must offer an authenticator app as a verification method.

How to Set It Up

To enable MFA for a given app:

1. During the Agent Cake configuration step for that app, you’ll be prompted to enter the MFA setup code (the TOTP secret).
2. This code is usually displayed as a QR code or alphanumeric string during the MFA setup process in the third-party app.
3. Copy the setup code and paste it into the designated field in Cakewalk.

Once saved, Agent Cake will use that secret to generate valid MFA tokens automatically.

Apps that use Google sign-in

When an app signs in through Google, there can be two separate MFA secrets:

• The Google account's secret, which protects the Google sign-in
• The app's own secret, if the app enforces two-factor authentication on top of Google

They are different codes and are not interchangeable. Where you enter each one depends on how the app signs in. See Sign in with Google.

Note: Some apps require additional steps: such as enabling MFA for the service account or navigating specific security settings. Please refer to the integration guide for your app to see detailed instructions on how to set up MFA with Agent Cake.