Tell me about Symantec VIP support

How does it work?

Deactivate a Symantec VIP credential

How to enable Symantec VIP authentication globally?

Tell me about the Unlock option

Enable Symantec VIP for select users

Tell me about Symantec VIP status

Enable Symantec VIP for yourself

Can I also enable SAML SSO?

How to get a Symantec VIP credential?

Help with your Symantec VIP device


How does it work?

When Symantec VIP is enabled for a user, the user completes a two-part process to log in to our user interface. The user will enter login credentials (login name and password) followed by Symantec VIP credentials (Symantec VIP credential ID and one-time security code). Note - Symantec VIP two factor authentication impacts UI access only (not API access).

How to enable Symantec VIP authentication globally?

Managers can go to Users > Setup > Security and select the option "Require Symantec VIP two-factor authentication for all users".

How to enable Symantec VIP authentication for selected users?

If not enabled globally, a Manager can enable Symantec VIP authentication individually for specific users. Go to Users > User Accounts and edit the account you're interested in. Then select the option "Symantec VIP two-factor authentication" under Security.

How to enable Symantec VIP authentication for yourself?

All users with login privileges can opt in for Symantec VIP authentication by registering their own Symantec VIP credential with our security service. Edit your own user account, go to the Security section and register your credential.

I don't have a Symantec VIP credential. How do I get one?

You can get a credential from the Symantec VIP Center at: https://idprotect.vip.symantec.com or https://vip.symantec.com. Each Symantec VIP credential bears a credential ID and allows the user to generate one-time security codes as needed.

How to deactivate a Symantec VIP credential?

Just click the Deactivate Credential button in the user's account settings. If you are deactivating your own credential, you will be prompted to validate your credential by providing two security codes from your credential device. Important - If you deactivate your credential and Symantec VIP authentication is required for your account, you'll need to register your Symantec VIP credential the next time you log in.

Tell me about the Unlock option

You can unlock any user's credential, except your own. Once unlocked, the user will need to enter their Symantec VIP security code the next time they log in. Need to unlock your own Symantec VIP credential? Ask a  Manager to do it. If you are the only Manager in your subscription, please contact Support.

Tell me about Symantec VIP status

You'll see one of these status indicators in each user's account settings:

VIP on indicator when VIP is required Symantec VIP is required and the user has registered a Symantec VIP credential.

VIP off indicator when VIP is required Symantec VIP is required and the user has not registered a Symantec VIP credential.

VIP locked indicator when VIP is required Symantec VIP is required and the user's credential is locked.

VIP on indicator when VIP is not required Symantec VIP is not required and the user has registered a Symantec VIP credential.

VIP off indicator when VIP is not required Symantec VIP is not required and the user has not registered a Symantec VIP credential.

VIP locked indicator when VIP is not required Symantec VIP is not required and the user's credential is locked.

Can I also enable SAML SSO?

We support the use of Symantec VIP or SAML SSO. If both are turned on for the same account, SAML SSO will be used and the Symantec VIP setting will be ignored.

Help with your Symantec VIP device

Please refer to the Symantec documentation for your device if you're not sure how to locate the security code or credential ID.