This guide explains how to require users in your Organization to enable the two-factor authentication (2FA) feature, and then verify that it remains enabled over time.

Introduction

• Every Infomaniak user has the possibility to activate two-step verification for accessing their account, which significantly increases the security of all the Organization's services…
  • A legal representative can require this activation otherwise access to the Manager and Web apps will no longer be possible for the user.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (smartphone or tablet app for iOS / Android) will still be possible.
• It is recommended to inform users of your Organization in advance, so they can continue to use the services.
• If an external user does not wish to carry out the operation requested by an Organization administrator, they can choose to exit it instead of activating it.

Identify users without 2FA

You can easily identify people who have not yet activated this security feature on their account:

1. Click here to access the user management section of your Organization.
2. This red symbol indicates that 2FA is not activated:
   
3. You can also filter long lists with this specific criterion to display only users who have not yet enabled 2FA:
   
   
4. To easily alert a user about their account security, click the action menu ⋮ located on their right.
5. Click Send a security alert to send an automatic email to the user, informing them of their different settings:
   
    

Require 2FA activation

Prerequisites

• Be an Administrator or Legal Representative‍ within the Organization.

To access the settings:

1. Click here to access the Organization's security management in the Infomaniak Manager (need help?).
2. Click the toggle switch to require an additional login verification for all users in the Organization:
   
3. Confirm the activation of the feature in the pop-up window.
4. Once the feature is enabled, users in the Organization who have not yet activated 2FA will receive a message (upon their next account action) prompting them to set up an additional authentication method from the available options and preventing them from performing any other actions until this is done: