Turning On Two-Factor Authentication

You can set up two factor authentication (2FA) for users in your directory. When enabled, 2FA requires users to verify their identity with a code either from an authenticator app or sent via SMS in addition to their password when signing in.

By default, 2FA is disabled for newly created directories.

Steps to turn on two factor authentication

1. In your directory, click the Security tab.
2. From the left menu, select Two factor authentication.
3. Under Two factor authentication methods, select one or both of the following:
   • Authenticator app — users verify their identity using an authenticator app on their device.
   • SMS — users receive a verification code via text message. SMS authentication is supported only for countries enabled for SMS in your account settings. 
4. Under Two factor authentication policy, select one of the following:
   • Required — 2FA is mandatory for all users.
   • Optional — users can choose to skip 2FA.
5. Click Save.