What change is being made?
ESR currently has a multi-factor authentication (MFA) option available for all clients. Starting August 1, MFA will become mandatory and required for all clients.

Why is this changing?
ESR is entrusted with highly sensitive information necessary for us to conduct background checks for our clients, and we have always taken extraordinary steps to ensure data security. Part of that effort is contracting with third-party data security experts that keep ESR informed about the changing security landscape and best practices to protect data; we have been advised that mandatory MFA is now a best practice. Making multo-factor authentication mandatory supports our commitment to uncompromised data security.

How does this work?
When in use, MFA will require proof of authentication via email upon the following conditions:

• The login being used has not been authenticated within a configured amount of time.
• The IP address of the login has changed since the last login
• The User-Agent (Browser) has changed since last login
• The login username and/or password has changed since last login

Generally, the configured value used for MFA lifetime is 24 hours. This value can be adjusted for certain clients upon review and discussion with your ESR service representative.

Who is affected by this change?

• All Employment Screening Resources clients will be required to use MFA for logging into the ESR client portal at https//esrcheck.com/app/Customers
• This change will affect both client logins and, if used, the primary account username.

When will this change take place?
ESR will implement MFA on all client accounts on Sunday, August 1 at approximately 7 PM PST.

Questions?
Any questions or concerns can be directed to:
Employment Screening Resources (ESR)
[email protected]