Admin Concentric accounts have always required two-factor authentication (2FA) but now healthcare organisations have the option to enable this for all clinician users. This is done via TOTP codes (Time-based One-Time Password not Top Of The Pops!) via an authenticator application so it’s more secure but adds a step to login flows and requires clinicians to have their mobile phone available to log in.