solved two-factor authentication question

iLoveHouseMusic
iLoveHouseMusic
@ilovehousemusic
10 years ago
517 posts
When installing the 2-factor authentication module, should that be enabled on all profiles by default? OR, is this something that each user would enabled on a per user basis?

I should clarify, I'm activating the module, there are existing users on the system. It seems that existing users will have the option to select that to enable it. For new users signups, is 2-factor auth enabled by default?

TIA,
Brian
updated by @ilovehousemusic: 05/21/14 01:28:33PM
brian
@brian
10 years ago
10,148 posts
iLoveHouseMusic:
When installing the 2-factor authentication module, should that be enabled on all profiles by default? OR, is this something that each user would enabled on a per user basis?

I should clarify, I'm activating the module, there are existing users on the system. It seems that existing users will have the option to select that to enable it. For new users signups, is 2-factor auth enabled by default?

TIA,
Brian

No - it is not enabled by default - users will need to turn it on in their account before it is active.

Note that right now I use it here on jamroom.net, and I am trying to track down a corner case bug in it which seems to occasionally cause the "remember me" function to not work correctly. Just a heads up that I am aware of it and working on it.

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
iLoveHouseMusic
iLoveHouseMusic
@ilovehousemusic
10 years ago
517 posts
@Brian - ok thanks for the heads up. I'll keep an eye out for the update.

Would there be any benefit to having it enabled by default on profiles, after the module is activated? Or is that too intrusive? My concern is for the most secured login/registration experience for my community. Open to discuss.
brian
@brian
10 years ago
10,148 posts
iLoveHouseMusic:
@Brian - ok thanks for the heads up. I'll keep an eye out for the update.

Would there be any benefit to having it enabled by default on profiles, after the module is activated? Or is that too intrusive? My concern is for the most secured login/registration experience for my community. Open to discuss.

The only problem is that if their account is not setup with an email they can easily access, it could block them from logging in.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
iLoveHouseMusic
iLoveHouseMusic
@ilovehousemusic
10 years ago
517 posts
Ah I see, it's for each login (just tested it). Hmmm ok that might be a lot of work for some. Forget I said that then. =) I'll leave it enabled for my master admin account and just let the user decide if that's what they want to use.
brian
@brian
10 years ago
10,148 posts
iLoveHouseMusic:
Ah I see, it's for each login (just tested it). Hmmm ok that might be a lot of work for some. Forget I said that then. =) I'll leave it enabled for my master admin account and just let the user decide if that's what they want to use.

It should not be for each login - as long as they check "remember me" it will only happen once every 2 weeks (although occasionally there is an issue with it which I am working on).


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Tags