2단계 인증 관리하기

image avatar

Charles Nadeau

Zendesk Documentation Team

2025년 3월 06일에 편집됨

12

1

댓글 21개

날짜
    최신순
      image avatar

      Kevin Adkins

      With this new enhancement - 

       

      Announcing the ability to require two-factor authentication for end users

       

      Are we going to get a 2FA status report option for end-users?

       

      admin-→account-→ security-→ advanced-→ authentication

       

      0

      image avatar

      Lilibic Barco

      I cannot join slack. It says “To join this workspace, you’ll need to ask the person who originally invited you for a new link.”

       

      0

      image avatar

      changim shin

      복잡해요

      0

      image avatar

      Audrey Ann Cipriano

      Hi 6663891008026 welcome to our Community! 

      To confirm, are you NOT receiving the code and you are unable to log in? If so, can you try to follow the instructions below to see if it'll work? 

      1. Search your email inbox for any recovery codes that were sent to you previously and use them to log in.

      2. If you are not able to locate any recovery codes, reach out to the owner of your account as they are able to generate additional codes for you.


      If this won't work, kindly contact us via Messaging for assistance, be advised that an owner on the account will need to give permission for us to take further action.

      More info here: I use 2-factor authentication and am locked out of my account. 

       

      Hope this helps!

      3

      image avatar

      George Awuah

      Hello Zendesk Team,

      Please when I want to sign-in and I am asked for my two-factor authentication code I actually do receive the code to enable me log in. This has persisted for weeks. Kindly support

      1

      image avatar

      Regina Giuliani

      I agree with Troy. Admins should be able to mandate the use of 2FA and turn off the don't ask again for 30 days. That goes against our corporate security policy as well. 

      4

      image avatar

      Eckhard Doll

      I agree with Troy that the choice whether the 2FA needs to be made for every login or after those 30 days should be up to the admins.

      4

      image avatar

      Troy Johnston

      Hi Christine, Zendesk,

      This is a significant security flaw in Zendesk implementation of 2FA.  2FA ought to be bundled with ability for administrator to mandate use of 2FA with every login event.  Leaving this up to the user breaks our security rules (and we are just a tiny company).

      This leaves us exposed to hacking.

      What we dont understand is the Sessions can clearly be set to expire.... and yet this does not sign out the user?  Or properly kill the session.  The implementation is flawed, unfortunately.

      Will Zendesk take this seriously and implement an Admin enforcement?  This should never be a user decision.

      7

      image avatar

      Christine

      Hi Matt,

      It is not possible to configure 2FA to be required every login. The "Don't ask again on this computer for 30 days" option is up to the individual user to decide and there are no global controls for this.
       
      Although you cannot remotely reset user sessions, you can do that with the usage of Sessions API. The Sessions API lets you view who is currently signed in. It also lets you terminate one or more sessions. Terminating a session sign out the user.

      3

      image avatar

      Matt Newnham

      Can 2FA login be required on every login? I know there is a way for users to change a checkbox that will then require 2FA on every login but I need to make it mandatory for everyone.

      5

      로그인하세요.

      계정 세부 정보

      세부 정보를 보려면 로그인하세요.

      로그인하여 계정 세부 정보를 한 눈에 확인하세요.

      로그인

      추가 콘텐츠