How are verification codes received by users logging into roles that require two factor authentication 2FA?

NetSuite's Two-Factor Authentication (2FA) framework provides users with multiple methods to receive their verification codes, ensuring both security and accessibility. The primary and recommended method is a time-based one-time password (TOTP) generated by an authenticator application. For flexibility, NetSuite also supports delivering codes via SMS/text message to a registered mobile phone number and through an automated voice call. These options allow users to authenticate even if they cannot access their primary authenticator app, providing robust security for roles with access to sensitive data.

A. E-mail: NetSuite does not use email to deliver 2FA codes for login verification, as it is generally considered a less secure channel for this purpose.
C. calling support: Contacting support is a troubleshooting or account recovery step, not a standard method for receiving a verification code during a routine login attempt.

1. NetSuite Help Center. (2023). Setting Up Two-Factor Authentication (2FA). SuiteAnswers, ID: 49212. In the "2FA Verification Methods" section, it explicitly states: "NetSuite 2FA supports the following methods for generating verification codes: Authenticator App, SMS/Text Message, and Voice Call."

2. NetSuite Help Center. (2023). Two-Factor Authentication. In the section "Setting Up 2FA", the documentation details the user setup process which includes options for "Authenticator App", "SMS/Text Message", and "Voice Call" as the available methods for receiving codes.