Setting up 2-factor authentication for IA Users

Developers can enable two-factor authentication (2FA) for all users in their IA system. To do so, follow these steps:

Developer console-side setup -

1. Access your instance’s developer console, click your email in the top-right corner, and navigate to the Admin page (note: admin access is required to see this option). Once there, open the Security tab and add your Email and/or SMS provider credentials. This step is necessary to enable 2FA.

2. Once the provider credentials are added, go to your IA backend system settings. In system settings, go to the Security section and enable the Require Two Factor Auth checkbox. This will enable two factor authentication for all the users in your system.

   

3. After enabling 2FA, you must assign a two-factor method (Email and/or SMS) to your existing users. To do this, run the add2FAMethodToUsers code service in your IA system backend, which will assign a method to all current users. Make sure the method you assign corresponds to a provider that has already been configured. The code service requires two_factor_method param with one of these values -

   1. sms: For sending OTPs via SMS only

   2. email_sms: For sending OTPs via Email and SMS

   3. email: For sending OTPs via Email only

4. Setup is now complete. Whenever a user logs in, an OTP will be sent to their chosen 2FA method.

IA 2-Factor Authentication -

When a user logs in, they will see this modal to enter the OTP. If needed, they can resend the OTP after 30 seconds.

Adding a new IA user -

When adding a new user, if 2FA is enabled, IA admins will see a new button group that allows them to assign a two-factor authentication method to the user.