This guide explains how to require users of your Organization to activate the functionality of double authentication (2FA), then check that it remains activated afterwards.

Preamble

• Each Infomaniak user has the ability to activate two-step validation for access to his/her account, which significantly increases the security of all the Organization's services...
  • A legal guardian may require this activation otherwise access to the Manager and Web apps will no longer be possible to the user.
  • Access to desktop apps (desktop app on macOS / Windows / Linux) and mobile apps (app for smartphone or iOS / Android tablet) will be always possible without 2FA.
• It is recommended that: prevent upstream users of your Organization, to allow them to continue to use the services.
• If an external user does not wish to perform the transaction requested by a United Nations administrator, he or she may choose to leave the transaction instead of activate it.

Identify users without 2FA

You can easily identify people who have not yet activated this security on their account:

1. Click here in order to access the management of your Organisation's users.
2. This red symbol means that the 2FA is not activated:
   
3. You can also filter the long lists with this precise criterion to only display users who have not yet activated the 2FA:
   
   
    
4. To easily alert a user about the security of his account, click on the action menu ⋮ located on its right.
5. Click on Send a security alert in order to send an automatic e-mail to the user informing him of his different settings:
   
    

Require activation of 2FA

Prerequisites

• To be Administrator or Legally responsible‍within the Organization.

To access the settings:

1. Click here to gain access to the Organization's security management on the Infomaniak Manager (Need help?).
2. Click the toggle switch button to enable an additional login check to be required for all users of the Organization:
   
3. Confirm the activation of the functionality on the window that opens.
4. Once the functionality is activated, users of the Organization who have not yet activated the 2FA get a message (from the next action on their account) encouraging them to configure an additional authentication method among those proposed and thus preventing them from taking any other action before it: