Managing Two-Factor Authentication
Beginning with version 5.2, system administrators can enforce two-factor authentication for all KeyControl users.
Enforcing Global Two-Factor authentication:
- Log into the KeyControl webGUI using an account with Security Admin privileges.
- In the top menu bar, click Settings.
- In the System Settings section, click Two-Factor Authentication Settings.
- On the Two-Factor Authentication Settings page, select ENFORCED.
- Click Apply.
Disabling Global Two-Factor Authentication:
- Log into the KeyControl webGUI using an account with Security Admin privileges.
- In the top menu bar, click Settings.
- In the System Settings section, click Two-Factor Authentication Settings.
- On the Two-Factor Authentication Settings page, select NOT ENFORCED.
- Click Apply.
Resetting Two-Factor Authentication for AD Users
- Log into the KeyControl webGUI using an account with Security Admin privileges.
- In the top menu bar, click Security.
- Select the Active Directory Users tab.
- Select the AD user that you want to modify.
- In the Two-Factor Authentication section, click Reset.