Force 2fa?

[billster]

is there a way to force two-factor authentication on all service manager accounts? Instead of clicking on the profile and enabling it manually under 'security settings'.

[Peter Clough]

You can set it as an option in the user import configuration.

Platform Configuration Guide - Two-factor authentication

[billster]

is there a way to force it on existing users?

 

https://docs.hornbill.com/data-imports-guide/users/azure/configuration#example-configuration

 

I set "operation" setting under "user" to "update"

and under "user" setting I put "enable2fa" as true/enable/email but it does not enable 2fa on user accounts.

 

But for some reason there's no write up of "enable2fa" in the Docs page?

 

The log file does not even say anything about the additional "enable2fa" field in the config file.

 

Thanks

[Steve Giller]

The most important question here is, how are your Users signing in to Hornbill?

The settings you are showing only apply to the Hornbill Direct Logon - if you are using SSO it is your IdP that configures 2fa

[billster]

1 hour ago, Steve Giller said:

The most important question here is, how are your Users signing in to Hornbill?

The settings you are showing only apply to the Hornbill Direct Logon - if you are using SSO it is your IdP that configures 2fa

Hi Steve, I got it working. I guess my Azure Import Utility was out of date.