How do I require two-factor authentication for my organization's Workplace?
Change platform:
Computer HelpThis article is only applicable to admins.
To require two-factor authentication for your organization's Workplace:
- Click
Admin Panel in the left menu on Workplace.
- Click
Security.
- Click the Two-factor tab. You may need to click More first to see this.
- Click the toggle next to Require two factor authentication to turn it on.
- Set your requirements. This includes:
- Decide who is required: choose from everyone, nobody, admins, or certain people sets.
- Set a date: choose when you'd like the two-factor authentication requirement to come into effect. After you select a due date, affected users will see a notice in their feeds telling them about this requirement. On or after the due date, Workplace will add a notice forcing affected users to set up two factor authentication.
- Click Save changes.
To monitor who’s using two-factor authentication at your organization:
- Click
Admin Panel in the left menu on Workplace.
- Click
Security.
- Click the Log tab.
- From here you can:
- Click Download file which sends you a file by email with login, password, admin, file and integration activity from the past 90 days.
- Click Add filter to speed up your search. You can filter by location, event (which has several two factor authentication options), date, name and email address.
If a user loses access to their second authentication factor
If a user has lost access to their second authentication factor, whether that's the number they receive the SMS on or their authentication app, they can reach out to their system admin.
To help users regain access to their Workplace accounts as a system admin:
- Click
Admin Panel in the left menu on Workplace.
- Click
People.
- The Account status of users who still need to confirm their second factor will be Verifying.
- Click
next to the user's name and select Generate authentication code.
- Share this code with the user and they'll be able to use it as their recovery code to access their account.