Deltek Replicon 2FA: how to set up an authenticator app

Deltek Replicon is the time tracking system many companies use for timesheets, time off, expenses and project hours. You don't own a Replicon account the way you own a personal one: your employer runs the system, and a Replicon administrator there decides how two-factor authentication works for you. Replicon calls it multi-factor authentication (MFA) or 2-Step Verification. It offers two methods, a code sent by email and a code from an authenticator app, which Replicon labels TOTP (Replicon). This guide covers the authenticator app with Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Replicon steps come from Replicon's own help pages, linked below. Those pages on replicon.com now redirect to Deltek's Learning Hub, which only shows its articles with JavaScript, so our automated reader got an empty page. On October 21, 2026 we read the replicon.com articles as archived copies on web.archive.org, saved in June and July 2025. We haven't tested the steps on a Replicon account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start: it depends on your administrator

Three things decide whether you'll see the option at all (Replicon):

• Permission. You can only add methods yourself if your permission set includes Edit Multi-Factor Authentication Methods. Otherwise, ask your administrator.
• Single sign-on. MFA only applies to people who sign in with a Replicon user name and password. If you sign in through your company's SSO, Google or Intuit, Replicon's MFA doesn't apply to you.
• Web only. MFA can't be set up in Replicon Mobile, so use a browser.

Your administrator can also make MFA mandatory for you. Then Replicon shows a setup page the next time you sign in, and you can't get any further until you add a method. Since October 2022, MFA has been mandatory by default for every Replicon administrator.

Turn on 2FA with an authenticator app

Replicon's help gives these steps (Replicon):

1. Click User Settings, or the icon in the bottom left-hand corner of the page, then click Settings.
2. Open the Security tab.
3. Click Add Authentication Method.
4. Choose Authenticator Application (TOTP).
5. Change the account name if you want. It only labels this method in Replicon.
6. Click Next. Replicon shows a QR code.
7. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If Replicon is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
8. Type the six-digit code that Novaz shows into the field in Replicon.
9. Click Add Authentication Application.

If you can't scan the code, Replicon has a Can't scan the QR code? link. Its help page doesn't say what appears after you click it. If Replicon shows a text key, add it in Novaz with +, then Enter key manually, and paste it into Setup key. See What is a 2FA setup key?

You can add more than one method, for example the authenticator app and an email address, or authenticator apps on two devices. Any one of them is enough to sign in (Replicon). Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, so a second method is your safety net if you lose that phone. Replicon doesn't mention backup or recovery codes.

When Replicon asks for a code

Replicon doesn't necessarily ask at every sign-in. Your administrator picks either Always check or a number of days, such as every 30 days. The schedule counts separately for each device, and a new device always gets asked the first time (Replicon).

When it does ask, you see a 2-Step Verification page. Pick TOTP if you have more than one method, open Novaz, type the Replicon code into the login field, and click Login (Replicon).

If Replicon rejects your code

Replicon's help pages don't cover a rejected authenticator code. The common cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Add the new phone first, then remove the old one. On the Security tab, click Revoke next to the old method and confirm with Revoke in the dialog (Replicon). If MFA is mandatory for you, Replicon won't let you revoke your last method, so this order matters. If you keep a Novaz iCloud backup or backup file, you can instead restore it on the new iPhone, and the existing TOTP method keeps working. Without one, you set Replicon up again on the new phone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

If you added an email method too, choose it on the 2-Step Verification page. Its codes stay valid for 30 minutes after you click Login (Replicon).

Without another method, go to your company's Replicon administrator. Replicon's login help sends employees there, not to Replicon Support (Replicon). Administrators can revoke a method from your user profile and add email authentication for you (Replicon). Replicon doesn't describe a separate recovery process, what proof it asks for, or how long it takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Use Revoke on the Security tab, as above. If the button doesn't work for you, your administrator has made MFA mandatory, and you must keep at least one method. Once the method is gone, open Replicon in Novaz and tap Remove account.

Official Replicon help

All read as archived copies on web.archive.org; the dates are when each copy was saved.

• Setting up your multi-factor (2-step) authentication method (June 21, 2025)
• Setting up multi-factor authentication (MFA) for your employees (July 9, 2025)
• What does 2-Step Verification mean when I'm logging in? (June 15, 2025)
• I can't log in to my account (June 20, 2025)