Managing Two-Factor Authentication

Beginning with version 5.2, system administrators can enforce two-factor authentication for all KeyControl users.

Enforcing Global Two-Factor authentication: 

  1. Log into the KeyControl webGUI using an account with Security Admin privileges.
  2. In the top menu bar, click Settings.
  3. In the System Settings section, click Two-Factor Authentication Settings.
  4. On the Two-Factor Authentication Settings page, select ENFORCED.
  5. Click Apply.

Disabling Global Two-Factor Authentication: 

  1. Log into the KeyControl webGUI using an account with Security Admin privileges.
  2. In the top menu bar, click Settings.
  3. In the System Settings section, click Two-Factor Authentication Settings.
  4. On the Two-Factor Authentication Settings page, select NOT ENFORCED.
  5. Click Apply.

Resetting Two-Factor Authentication for AD Users

  1. Log into the KeyControl webGUI using an account with Security Admin privileges.
  2. In the top menu bar, click Security.
  3. Select the Active Directory Users tab.
  4. Select the AD user that you want to modify.
  5. In the Two-Factor Authentication section, click Reset.