Blog Post
So this will be a major issue with many clients here in Fiji as both Authenticator App and SMS both are subject to phone device. Majority times staff don’t have company phones and organizations are afraid that it can become a security breach if staff decides to leave and company has not taken access off the file before they exit.
Can it be suggested for the email option to remain as a 2FA method for new users as well, pls?
Hey SarasKrishnan
I've been able to clarify a few details with the team and have edited my previous response with the updated information.
Hi AmandaMYOB , will it be made very clear to new users (who may well be struggling to understand the whole 2FA) that unless they include an email option it will not be possible to add it later?
PS - editing your original reply means that this thread no longer makes sense - might be better to add revised text to your reply, or at least indicate that it has been edited.
Hey Mike_James
Thanks for raising, I've updated to show it's been edited now. The prompts to set up 2FA for new users will guide them through step by step to avoid customer confusion.
At the risk of repeating your response, pls confirm: So when creating a new user, we would be able to select email as method to receive 2FA; it’s just that this mode can not be added if another method was initially chosen when setting up the user. This I mean for users added to file from this point forward.
Hey SarasKrishnan
You are correct. New users will have the option to set up email as an authentication method when they're initially setting up 2FA. If they do not set it up in the beginning they will not have the option to add it as an authentication method later.
AmandaMYOB Wonderful! Then that’s fine with me as, if clients opts for something else in the initial setup then I no longer am responsible afterwards with regards to issues regarding this😄 I shall pre-warn them.
Thanks for providing the clarification.
