O4 allows users to set up two factor authentication. Once enabled, a user will be asked to provide a confirmation code each time they log in. If they remain signed in for more than 30 days, the confirmation code will expire and the user will be signed out, requiring a new confirmation code to be entered. Confirmation codes will be sent to the user's email address that is set up in their user editor.
For a video walkthrough about enabling two factor authentication, click here.
There are three ways two factor authentication can be enabled:
- Users can enable it for themselves
- Admins can enable it for another user
- Admins can enable it for all users
Enabling Two Factor Authentication For Your User
1. Select the 
icon.
2. Select "Security Settings" from the drop-down list.
4. The "User Security" page will appear.
5. Under the "Authentication" section, select the "Two Factor Authentication" toggle so that it is on.
- on
- off
6. Select 
.
Enabling Two Factor Authentication For Another User
Users with admin access to Users can enable two factor authentication for other users.
1. Select the 
icon.
2. Select "Configuration" from the drop-down list.
3. Select "Users."
4. Open a user.
5. The User Viewer will appear.
6. Select "Enable Two Factor."
Enabling Two Factor Authentication For All Users
Users will admin access to Users can enable two factor authentication for all users.
1. Select the icon.
2. Select "Configuration" from the drop-down list.
3. Select Settings, then select Web from the drop-down menu.
4. Enable the the "Global Two Factor Authentication" toggle so that it is on.
- - on
- - off
5. Select 
.
Verification Email
The next time a user logs in they will be asked to provide a confirmation code. Users should receive an email containing the code. Once received, enter the confirmation code and select 
.
If users do not receive an email, they may select the "Resend Code" link at the bottom of the screen.
An example of the email is below:
Comments
2 comments
Can this setting be forced to the ON position by an admin so that an individual user is unable to bypass an organizational requirement for 2FA?
Hi James,
This is currently in our development queue. It will be published in our release notes as soon as it is pushed to production. Our release notes can be found here.
Thank you,
Lauren
Please sign in to leave a comment.