Skip to main content

As an administrator, how do I make two-factor authentication mandatory?

Written by Rutger Bosch
Updated over a week ago

In addition to logging in with a username and password, Informer also uses a security code. This provides an extra layer of security compared to other accounts. Besides the username, password, and security code, two-factor authentication (2FA) can also be set up. This requires an additional code to log in.

Increase security

Activate two-factor authentication

As an account administrator, you can make two-factor authentication mandatory for all your employees.

To enable two-factor authentication, follow the steps below:

  1. Navigate to Settings in the left-hand menu;

  2. Activate Two-factor authentication;

  3. Save to activate two-factor authentication

  4. From now on, every user must set up 2FA for their user account.

Note: If the user has not yet set up two-factor authentication, the user will be redirected to their user page and the message
"Note: As long as 2FA has not yet been set up, the user will always be redirected to the user settings. The user cannot use the system until 2FA has been set up."
will be displayed until two-factor authentication has been configured.


To activate 2FA the app Google authenticator must be installed on the mobile phone.


How to limit the validity of 2FA

Users can choose to limit the use of Two-Factor Authentication (2FA) to once every 30 days when logging in from a known IP address. If this is enabled, 2FA will only be required once every 30 days, and users will log in with their usual credentials during that period.

For added security, you can choose to never allow a 30-day validity for 2FA, ensuring that every login always requires 2FA, regardless of whether the IP address is recognized.

To limit the validity of 2FA, follow the steps below:

  1. Navigate to Settings in the left-hand menu;

  2. Activate Limit validity of two-factor authentication;

  3. Now, users will always need to use 2FA during the login process, regardless of the IP address or login history.

Did this answer your question?