Enforce two-factor authentication

Intelligence Center administrators can configure an Intelligence Center instance to enforce two-factor authentication Intelligence Center-wide and for all Intelligence Center users.

  • If the Intelligence Center delegates authentication to an external LDAP service provider, it is advisable to implement two-factor authentication through LDAP.

  • If the Intelligence Center delegates authentication to an external SAML service provider, it is not possible to set up two-factor authentication in the Intelligence Center.

Enforce two-factor authentication Intelligence Center-wide

To enforce two-factor authentication Intelligence Center-wide, you must be an Intelligence Center administrator.
After saving the configuration, users must set up two-factor authentication to sign in to the Intelligence Center.

  1. In the side navigation bar click the settings icon > System settings > Account policy.

  2. In the Account policy view click Edit account policy.

  3. In the Edit account policy settings view scroll down to Two factor authentication.

  4. Select the Users can only log in if they have configured two factor authentication checkbox.
    To let users choose whether they want to enable two-factor authentication for their user profile or not, leave the checkbox deselected.

  5. To store your changes, click Save; to discard them, click Cancel.

Suspend two-factor authentication

You can give users the option to suspend the validation of the second authentication factor for a predefined number of days.
Intelligence Centers users who sign in with two-factor authentication can enable suspending the second factor by selecting the Do not ask me for N days checkbox.
This allows balancing security with user convenience.

To do so:

  1. In the Edit account policy settings view scroll down to Two factor authentication.

  2. Select the Allow users to choose the option "Do not ask me for N days" checkbox.

  3. In the Select number of N days * input field enter an integer to define the duration in days of the validation suspension.
    The maximum number of days you can set is 365 (one year).

  4. To store your changes, click Save; to discard them, click Cancel.