How to Manage User-Based Two-Factor Authentication (2FA) Settings in Your Organization from the Admin Console

Your Enterprise Server contains important information — as an Admin, you can set up Two-Factor Authentication (2FA) to help keep that information safe. This additional level of protection can be managed in the Security section of the Admin Console, and is available both organization-wide and on a user-by-user basis.

In this guide, we’ll cover managing Two-Factor Authentication for individual users. If you’d like to manage this on an organization-wide basis, have a look at our alternate guide, How to Configure and Enforce Two-Factor Authentication (2FA) Organization-Wide in the Admin Console.

_{* Note that 2FA can’t be enabled through Jotform if you’re using SSO (since your login security and restrictions would be controlled by that integration instead).}

Setting up Two-Factor Authentication

First, you’ll need to enable Two-Factor Authentication on your server, if it isn’t already, and set up user-specific settings. 

1. In the Admin Console, click on Security on the menu on the left side of the screen.

2. Then, toggle On the switch next to Two-Factor Authentication (2FA) if it isn’t already enabled.

3. Toggle Off the switch next to Enforce two-factor authentication for all users. 

Settings

• Enforce two-factor authentication for all users: This setting requires all users to set up 2FA. If this is off, you can manually enforce 2FA on a user-by-user basis. If this is enabled, individual 2FA can’t be set up. 
• Show “Don’t ask again on this device” while logging in: This setting creates a checkbox users can click to prevent having to reauthenticate every time they log in.

Enforcing 2FA for Individual Users

If you don’t want to globally enforce two-factor authentication, you can enforce it on a user-by-user basis. Two-factor authentication needs to be enabled in the Security settings first, with Enforce two-factor authentication for all users toggled Off. 

Let’s walk through how to set that up: 

1. In the Admin Console, click on Users on the left-hand side of the page.

2. Then, click on the three-dot menu for the user you’d like to enforce two-factor authentication for.

3. Next, click on 2FA Settings from the menu

4. Next, toggle On the switch next to Enforcement.

5. Finally, click Save.

Configuring 2FA Settings

When 2FA is enforced for a user, they’ll be prompted to set up 2FA when they log in again. They’ll be prompted to set up 2FA using an app like Google Authenticator, Authy, or Duo, and then scan a QR code to link the accounts. Here’s how that’ll look on their end: 

Managing 2FA for Individual Users

As an Admin, you can also disable or reset the 2FA authentication for users from the Admin Console. 

Disabling 2FA

1. In the Admin Console, click on Users. 

2. Then, click on the three-dot menu next to the user you’d like to disable 2FA for.

3. Next, click on 2FA Settings from the menu.

4. Then, toggle Off the switch next to Enforcement.

5. Finally, click Save.

Resetting 2FA

1. In the Admin Console, click on Users. 

2. Then, click on the three-dot menu next to the user you’d like to disable 2FA for.

3. Next, click on 2FA Settings from the menu.

4. Then, click on Reset 2FA.

5. Finally, click Yes, Reset 2FA in the pop up window. 

Afterwards, users will need to follow the steps to configure 2FA for their account. 

See also: 

• How to Update User Information in the Admin Console
• How to Lock Users in the Organization from the Admin Console
• How to Reset User Passwords in Your Organization from the Admin Console
• How to Enable and Manage SSO Organization-Wide in the Admin Console