This guide explains how to require users in your Organization to enable the two-factor authentication (2FA) feature, and then verify that it remains enabled.

Introduction

• Every Infomaniak user can enable two-factor authentication for access to their account, which significantly increases the security of all the Organization's services...
  • A legal representative can require this activation, otherwise the user will no longer be able to access the Manager and web apps.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (application for iOS / Android smartphones or tablets) will always be possible without 2FA.
• It is recommended to inform the users of your Organization in advance, so that they can continue to use the services.
• If an external user does not wish to perform the action requested by an organization administrator, they can choose to leave the organization instead of enabling it.

Identify and prevent users without 2FA

You can easily identify and contact people who have not yet enabled this security feature on their account:

1. Click here to access the user management section for your Organization.
2. If necessary, enable the Security column:
   
3. In this Security column, the red symbol indicates that 2FA is not enabled:
   
4. Click on the user in question to access the alert sending feature:
   
5. After your confirmation, an alert email will be sent from a no-reply address to the user in question:
   

Require 2FA activation

Prerequisites

• Be an Administrator or Legal Representative within the Organization.

To access the settings:

1. Click here to access the organization's security management settings in the Infomaniak Manager (need help?).
2. Click the toggle switch to enable a requirement for all users in the organization to undergo an additional login verification:
   
3. Confirm the activation of the feature in the window that appears.
4. Once the feature is activated, users in the Organization who have not yet activated 2FA will receive a message (the next time they perform an action on their account) prompting them to configure an additional authentication method from the available options and preventing them from performing any other action until they do so: