Global Setting for 2FA Requirement

5 votes

Considering your portal grants access to all of our monitored systems, we should have the ability to enable (something like an on/off switch) 2FA on a global level. This would mean any current users and/or new users cannot log into the portal until the configure and set up 2FA. As of today, it's a user's choice. The administrators should be able to make this a requirement.

Done Suggested by: Kyle Woods (19 Jan, '21) • Upvoted: 19 Feb, '21 • Comments: 3

Comments: 3

01 Feb, '21
Willem van Zyl
I second this. The end user will mostly disable this and to keep security in a good standing order the Administrator must be able to enforce this for all users.
14 Feb, '21
Johnny J
Ability to force it for users, scope or group of individual, but also setting to exclude specific users e.g. central/emergency backdoor admin
In reference:
https://pulseway.featureupvote.com/suggestions/159164/2factor-remember-login-on-secured-device-30-days
18 Feb, '21
Marius Mihalec Admin
In the Web Application -> Server Admin -> Settings -> Security Tab, select the "Enforce 2FA for all accounts" option.