Enable 2FA for All User Accounts

If your Paligo account is on the Enterprise plan, you can:

  • enable two-factor authentication (2FA) on all user accounts at once. You can also force all users to set up 2FA for their user accounts the next time they try to log in.

  • enforce a password rotation policy.

Note

If your Paligo account is on a different plan, see Enable 2FA on Individual User Accounts.

To set up 2FA and password rotation policy for all user accounts:

  1. Log in to Paligo as an administrator.

  2. Select your profile name in the upper right corner to display a menu, and then select Settings.

    Paligo displays the settings page, which shows the Users tab by default. It contains a list of your Paligo users. A shield icon shows the 2FA status of the user accounts:

    • Green icon - User has enabled 2FA and associated a verification app. These users are ready to use 2FA.

    • Gray icon - User has enabled 2FA but has not associated their Paligo account with a verification app.

    • No icon - User has not enabled 2FA or associated Paligo with a verification app.

  3. Select the Password policy button to display the password settings dialog.

    select-password-policy.jpg
    Password Policy dialog showing various settings, including the Authentication settings for two-factor authentication.
  4. In the Authentication section:

    • Check Auto-enable two factor authentication if you want Paligo to use two-factor authentication (2FA) for all user accounts.

    • Check Enforce setup if you want users to set up 2FA for their user account the next time they log in. To get access to Paligo, they will need to run an authentication app on their smartphone or another device and associate it with Paligo. They will be unable to log into Paligo until they have set up 2FA.

      If you leave the checkbox unselected, users will be able to postpone setting up 2FA for their user accounts. Until they set up 2FA, they will be able to log in with only their username and password, which is less secure.

      Note

      You can only enforce 2FA setup if you also check the Auto-enable two factor authentication setting.

  5. Select Save.

When your Paligo users next log in, they will be prompted to set their user accounts for two-factor authentication.