Because security codes aren’t as strong as security keys for 2-Step Verification, you should limit security codes to users who must use browsers, devices, or apps which don’t support security keys. You can also allow security codes to let users get their work done in situations where security keys aren’t supported.
Sunlite suite 2 reset verification#
If the login_challenge_method parameter has the value idv_preregistered_phone, the user authenticated with a text or voice verification code.īefore enforcing security keys, review Account reports to find users who set up security keys (report data could be delayed up to 48 hours). To view real-time 2-Step Verification status for each user, go to Manage a user’s security settings. Use the login_verification Login Audit activity event to track users who sign in using 2-Step Verification verification codes they receive by text message or voice call.Also inform them that 2-Step Verification verification codes won't be available on their phones after the enforcement date. Before enforcement takes effect, tell users to start using another 2-Step Verification method.To avoid locking out these users from their accounts: If you currently allow any 2-Step Verification method, you probably have users who verify only by text and voice call. Only security key-Users must set up a security key.Ĭonsiderations when you enforce these methods: Any method except verification codes via text, phone call.Any except verification codes via text, phone call-Users can set up any 2-Step Verification method except using their phones to receive 2-Step Verification verification codes.Any-Users can set up any 2-Step Verification method.Learn more about Best practices for 2-Step Verification Enforcement methods When you enforce 2-Step Verification, the enforcement method defaults to “Any.” Consider using security keys, which are the most secure 2-Step Verification method. Choose a 2-Step Verification method to enforce
Sunlite suite 2 reset how to#
Learn how to avoid account lockouts when 2-Step Verification is enforced. While this workaround allows users to sign in, it’s not recommended as a standard practice. You can give users extra time to enroll by adding them to an exception group where 2-Step Verification isn’t enforced. You might have users who haven’t set up the required 2-Step Verification method by your enforcement date. If users don't comply by the enforcement date For new employees, set a new user enrollment period. Give users time to add a 2-Step Verification method. Communicate your plans to enforce 2-Step VerificationĬommunicate your plans and enforcement date before setting an enforcement policy. For example, you decide to switch from allowing any 2-Step Verification to requiring security keys. You’ll have to help user recover their accounts so they can sign in. When you enforce 2-Step Verification, users without compatible 2-Step Verification methods are locked out of their accounts when their active sessions expire. Create the groups in Admin console, Groups API, or Directory Sync (not Google Groups).įor easier identification, you might include the organizational unit in the name of exception groups (for example, exgrp_ OU_name).Īllow users to turn on 2-Step Verification.2-Step Verification settings apply to users in the exception group (not to group addresses or nested groups).Users in the exception group must belong to the organizational unit.You can assign one exception group to an organizational unit.For example, require security keys for a small team in your Sales organizational unit. You can customize 2-Step Verification settings for organizational units and exception groups-a group of users within organizational unit. (G Suite accounts created before December 2016 have 2-Step Verification turned off by default). By default, users can turn on 2-Step Verification and use any verification method. Next, let your users turn on 2-Step Verification. Step 2: Set up basic 2-Step Verification (required) Which 2-Step Verification method is required or recommended.įor details, go to Best practices for 2-Step Verification.If required, give the date by which users must turn on 2-Step Verification.Whether 2-Step Verification is optional or required.What is 2-Step Verification and why your company is using it.Step 1: Notify users of 2-Step Verification deployment (required)īefore deploying 2-Step Verification, communicate your company’s plans to your users, including: You and your users play important roles in setting up 2-Step Verification.
0 kommentar(er)
