mirror of
https://github.com/fosrl/docs-v2.git
synced 2026-02-12 07:56:45 +00:00
df9b36cbe0
Standardize edition-gated terminology to Enterprise Edition across docs where feature availability is described. Add links to /self-host/enterprise-edition so users can quickly understand edition differences before enabling gated features or selecting an installer edition.
31 lines
1.2 KiB
Plaintext
31 lines
1.2 KiB
Plaintext
---
|
||
title: "Multi-Factor Authentication"
|
||
description: "Enable and manage two-factor authentication and enforcement for your organization"
|
||
---
|
||
|
||
Pangolin supports two‑factor authentication (2FA) for Pangolin user accounts.
|
||
|
||
### Enable or Disable 2FA
|
||
|
||
- Click your profile menu (top right) to enable two‑factor authentication.
|
||
- You will need to confirm your password and code before enabling/disabling 2FA.
|
||
|
||
### Supported Methods
|
||
|
||
- **Time‑based one‑time code (TOTP)**: Use an authenticator app (e.g., 1Password, Google Authenticator).
|
||
- **Push via email**: Contact sales to enable.
|
||
- **Push via Duo**: Contact sales to enable.
|
||
|
||
### Enforcement
|
||
|
||
<Note>
|
||
Two‑factor enforcement (requiring 2FA at login) is available in [Enterprise Edition](/self-host/enterprise-edition) only.
|
||
</Note>
|
||
|
||
To enable enforcement, go to Organization Settings and toggle 2FA enforcement in the Security section.
|
||
|
||
- Enforcement is configured per organization.
|
||
- MFA enforcement only applies to internal Pangolin user accounts. This policy does not apply to accounts linked to an external identity provider.
|
||
- When enforced, users must enable 2FA before accessing the organization or its resources.
|
||
- Users without 2FA will see a prompt directing them to enable it before proceeding.
|