Require two-step verification for everyone

When you require two-step verification, everyone in your organization must use a code from an authenticator app as well as their password, in every Moraph service.

Before you start

• You need the Administrator role.
• Turn on two-step verification for your own account first. Otherwise the page says Turn on two-step verification for your own account first (Your account → Security), then require it for everyone. See Set up two-step verification.
• Tell your colleagues it’s coming, and that they’ll need an authenticator app.

Steps

1. Open People and access and choose the Security tab.

2. In Two-step verification, choose Require it for everyone.

   Result

   The page says Two-step verification is now required for everyone in your organization. People without it will be asked to set it up at their next sign-in. The status changes from Optional to Required.

The side panel Without two-step verification shows how many people, and who, still need to set it up; when no one is left it says Everyone has it on. On the People tab, the Two-step column shows On, or Set up at next sign-in.

What your colleagues experience

The next time someone without it opens a Moraph service, they are taken to their Security page with the message Your organization requires two-step verification. Set it up to continue. They can’t continue until it’s on. People who already use it notice nothing, except that they can no longer turn it off.

Stop requiring it

On the Security tab, choose Stop requiring it and confirm. People who use two-step verification keep it on.

If someone loses their device

They can sign in with one of their recovery codes. If they have none, contact your Moraph team: Moraph confirms the person’s identity with your organization before restoring access.