Troubleshoot two-factor authentication (2FA) in Nebula

When two-factor authentication (2FA) is enabled, you may encounter the following error messages on the login page:

• Code is incorrect or expired
• Session timed out

Code is incorrect or expired

Authenticator app codes change every 30 seconds. This error indicates the code was entered after the time period lapsed. To resolve this: 

1. Sync the time on the mobile device authentication app. 
2. Enter the most recent code from your app before it expires.

Session timed out

This error indicates the login session timed out after you entered your password. The time on the device you are logging in with must match the time on your device with the authenticator app. To resolve this:

1. Sync the time settings on the device you are using to log in.
2. Log in to Nebula.

For information on configuring time synchronization settings in an Active Directory managed environment, see the following articles:

• Windows Time service tools and settings
• Time mechanisms for Active Directory Windows Virtual Machines in Azure

If you're still experiencing console login issues with Nebula, have another Super Admin reset 2FA for your account or contact Support. For more information, see Troubleshoot two-factor authentication (2FA) in Nebula.