This guide explains how to force users in your Organization to enable the two-factor authentication (2FA) feature, and then verify that it remains enabled afterward.

Preamble

• Each Infomaniak user has the option to enable two-step verification for access to their account, which significantly increases the security of all the Organization's services…
  • A legal representative can require this activation otherwise, access to the Manager and Web apps will no longer be possible for the user.
  • Access to desktop apps (desktop application on macOS / Windows / Linux) and mobile apps (application for iOS / Android smartphone or tablet) will always be possible without 2FA.
• It is recommended to warn users in your Organization in advance, so they can continue to use the services.
• If an external user does not wish to perform the operation requested by an Organization administrator, they can choose to leave instead of activating it.

Identify users without 2FA

You can easily identify people who have not yet enabled this security on their account:

1. Click here to access the management of users in your Organization.
2. This red symbol means that 2FA is not enabled:
   
3. You can also filter long lists with this specific criterion to display only users who have not yet enabled 2FA:
   
   
    
4. To easily alert a user about the security of their account, click on the action menu ⋮ located to their right.
5. Click on Send a security alert to send an automatic email to the user informing them of their various settings:
   

Require 2FA activation

Prerequisites

• Be Administrator or Legal Representative within the Organization.

To access settings:

1. Click here to access the management of the Organization's security on the Infomaniak Manager (need help?).
2. Click the toggle switch to require an additional login verification for all users in the Organization:
   
3. Confirm the activation of the feature in the window that opens.
4. Once the feature is activated, users of the Organization who have not yet activated 2FA receive a message (as soon as the next action on their account) prompting them to set up an additional authentication method from those offered and thus preventing them from performing any other action before this one: