Enforce two-factor authentication#

Intelligence Center administrators can configure a Intelligence Center instance to enforce two-factor authentication Intelligence Center-wide and for all Intelligence Center users.

Note

  • If EclecticIQ Intelligence Center delegates authentication to an external LDAP service provider, it is advisable to implement two-factor authentication through LDAP.

  • If EclecticIQ Intelligence Center delegates authentication to an external SAML service provider, it is not possible to set up two-factor authentication in EclecticIQ Intelligence Center.

Enforce two-factor authentication Intelligence Center-wide#

Note

To enforce two-factor authentication Intelligence Center-wide, you must be a Intelligence Center administrator.

After saving the configuration, users must set up two-factor authentication to sign in to EclecticIQ Intelligence Center.

  1. In the side navigation bar click the settings icon Settings > System settings > Account policy.

  2. In the Account policy view click Edit account policy.

  3. In the Edit account policy settings view scroll down to Two factor authentication.

  4. Select the Users can only log in if they have configured two factor authentication checkbox.

    To let users choose whether they want to enable two-factor authentication for their user profile or not, leave the checkbox deselected.

  5. To store your changes, click Save; to discard them, click Cancel.

Suspend two-factor authentication#

You can give users the option to suspend the validation of the second authentication factor for a predefined number of days.

Intelligence Centers users who sign in with two-factor authentication can enable suspending the second factor by selecting the Do not ask me for N days checkbox.

This allows balancing security with user convenience.

To do so:

  1. In the Edit account policy settings view scroll down to Two factor authentication.

  2. Select the Allow users to choose the option “Do not ask me for N days” checkbox.

  3. In the Select number of N days * input field enter an integer to define the duration in days of the validation suspension.

    The maximum number of days you can set is 365 (one year).

  4. To store your changes, click Save; to discard them, click Cancel.