Legacy Option to force Two-Factor

Status
Not open for further replies.

madmaxmangos

Customer
Currently two-factor only kicks in when you're IP address changes. I would like to see the following options added...

  • Account setting to force force two-factor authentication every time you login or inactive for a certain time (maybe a setting of hours could determine this?)
  • Account setting to force two-factor authentication for login into the admin CP for those administrators who have it enabled
 
Upvote 0
This suggestion has been closed. Votes are no longer accepted.
+1

I work on a few sites - big and small. On large sites I run DUO Authentication (paid service). On smaller sites, I use the DBT 2 Factor Authentication plugin (free service provided by Google).

I would love the ability to force certain usergroups (admins, mods, staff) to authenticate via 2 Factor. (extra layer of security)

Right now, there's no easy way to see who has "authenticated" to improve the security of the site.
 
Status
Not open for further replies.
Back
Top