Two-factor authentication (2FA) is an additional security step that's designed to help strengthen an account and prevent others from accessing it. 2FA requires verifying the identity not only with an e-mail address and password, but also by generating a so-called one-time password (OTP) that is only valid for a short amount of time. A valid one-time password can be generated by an authenticator app or sent via SMS.

This article explains how you can enforce other users in your IXON Cloud company to use 2FA. Effectively this means that they can only access your IXON Cloud company if they have 2FA enabled for their user account. This improves the overall security of your IXON Cloud company.
If you're instead looking to enable or disable 2FA for your own user account, see How to enable or disable two-factor authentication (2FA).

Instructions

To enforce 2FA for other users, you first need to have 2FA enabled on your own account.

1. Enable 2FA on your own user account.
2. Go to Admin > Roles and Edit the role of the user(s) you wish to enforce 2FA for.
   • You can only edit roles with equal or less permissions than yourself.
   • If the permission Enforce two-factor authentication is greyed out, that means you have not yet enabled 2FA for your own user account.
   • Once enforced, the next time a user without 2FA tries to access your IXON Cloud company, they'll see a prompt explaining that 2FA is required to continue. There, they can also directly enable 2FA. If they press Cancel, they cannot access your IXON Cloud company.
     
   • You can see which users have 2FA enabled at Portal > Users. Note: If it says "Off" at a user whom you've enforced 2FA for, they have not enabled 2FA yet. They can still access other IXON Cloud companies that do not require 2FA. If you see that they have been active recently, it's possible that they accessed one of those companies or simply haven't had the chance to go through the 2FA setup steps properly. Either way, they cannot access your IXON Cloud company at all until they enable 2FA.