Manage Users and Licensing
      Back to home
      1. Help Center
      2. Manage Users and Licensing

      Manage 2FA for Users

      Require your people to use 2FA and how to reset 2FA devices

      2FA Required Mode

      To ensure your users have secure accounts, you can require users to enable 2FA before they can access TopLeft.

      In this mode, users cannot access Kanban boards without first enabling 2FA for their accounts. When a user without 2FA tries to access a board, they are shown an error message and a prompt to enable 2FA.

      When using SSO, we recommend not requiring 2FA, because your SSO provider will have its own 2FA mechanism.

      To require 2FA, follow these steps.

      1. As an administrator, click the gear icon in the main menu. Under Other Stuff, click Advanced Options.
      2. Find SECURITY_TWO_FACTOR_AUTH_REQUIRED_MODE and check the box in the Value column.
      3. At the bottom of the page, click Save.

      Find Which Users Have 2FA

      You can check which users have enabled 2FA.

      1. Navigate to Admin > Users.
      2. Review the list of users. A checkmark in the 2FA column means the user has configured 2FA.

      Reset Two Factor Authentication Device

      If a user loses their 2FA device, you can disable 2FA for their account so they can log in and re-enable it.

      To remove 2FA from a user account, follow these steps.

      1. Navigate to Admin > Advanced Options.
      2. In the menu on the left, scroll to the bottom and click TOTP devices.
      3. Click the name of the user whose 2FA device you want to remove.
      4. Scroll to the bottom of the page and click Delete.

      The user's 2FA has now been disabled. They can log into TopLeft and re-enable their 2FA.