Security

The Security tab decides whether two-factor authentication is required (Sign-in protection for every account.).

From the side menu, open Administration › Settings, then click the Security tab.

Fields

• Require two-factor authentication: Users without it are sent to their profile to set it up before they can use the system.
• Only for administrators: Applies the requirement only to users who can manage users, roles or settings. It has an effect only when the first switch is on.

How to require two-factor authentication

1. Turn Require two-factor authentication on.
2. To require it only from administrators, also turn Only for administrators on.
3. Click Save settings.

From their next page, the users concerned who have not set it up are sent to My profile with the message Your organisation requires two-factor authentication. Set it up to continue using the system. Once it is set up, they can work normally, and they cannot turn it off. See Two-factor authentication.

Tip

Tell your users before turning the requirement on, so they install an authenticator app on their phone in advance.

Note

Other protections are always on: sign-in is locked for a short while after 5 failed attempts, password reset requests are limited, and passwords must be at least 10 characters with upper-case and lower-case letters and numbers.

Required permissions

Settings › View to open; Settings › Edit to save.