Forcing 2FA for all users

[Robinjoeh]

Hello guys!

I can't find any information about this, but is it possible to globally enforce 2 factor authentication to be used for all users?

I.e. having a pool of allowed devices, and require a code from one of these? The current 2FA built in seems to be "per user", and has to be configured for each.

[ibennetch]

You’re right, currently it’s individual to the user account. We could discuss here what a site-wise policy would look like.

[Robinjoeh]

Gotcha! I think that could be a pretty nice enhancement.

My original thought was to have a pool of authorized devices (to get a code from), and one of these devices can be used when logging in to any account (unless the account has individual 2FA configured).

Is it possible to have multiple authorized devices currently, or it is just 1 device per user?

[williamdes]

Duplicate of #14335

[tarunjainsagar]

Hi Team, Any tentative timelines to add this feature to "force 2FA for all users" ?

[williamdes]

Hi Team, Any tentative timelines to add this feature to "force 2FA for all users" ?

I think this could be implemented for 5.2, thanks for the 🏓

[x9nico]

I hope one day this feature will be available :)