This guide explains how to force users in your Organization to enable the double authentication (2FA) feature, and then verify that it remains activated.

Introduction

• Every Infomaniak user has the option to enable two-step verification for accessing their account, which significantly enhances the security of all the Organization's services…
  • A legal representative can require this activation otherwise the user will no longer be able to access the Manager and Web apps.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (application for iOS / Android smartphone or tablet) will always be possible without 2FA.
• It is recommended to notify users of your Organization in advance, so that they can continue to use the services.
• If an external user does not wish to perform the operation requested by an administrator of the Organisation, they can choose to leave instead of activating it.

Identify users without 2FA

You can easily identify the people who have not yet activated this security on their account:

1. Click here to access the management of your Organization's users.
2. This red symbol indicates that 2FA is not activated:
   
3. You can also filter long lists with this specific criterion to display only users who have not yet activated 2FA:
   
   
    
4. To easily alert a user about the security of their account, click on the action menu ⋮ located to their right.
5. Click on Send a security alert to send an automatic email to the user informing them of their various settings:
   

Enforce 2FA activation

Prerequisites

• To be Administrator or Legal Representative‍ within the Organization.

To access the settings:

1. Click here to access the security management of the Organization on the Infomaniak Manager (need help?).
2. Click on the toggle switch to enable an additional login verification to be required for all users of the Organization:
   
3. Confirm the activation of the feature in the window that opens.
4. Once the feature is activated, users of the Organization who have not yet activated 2FA will receive a message (as soon as they perform their next action on their account) prompting them to set up an additional authentication method from those offered and thus preventing them from performing any other action before doing so: