When two-factor authentication (2FA) is on for your company, users follow the 2FA login flow. Each user registers an authentication method the next time they sign in, so everyone with a verified domain can set up 2FA themselves.
Reset a user's 2FA
If your company turns on 2FA for everyone on its domain, the domain owner can reset a user's 2FA in Access Identity. This helps when a user can't receive 2FA codes by text message and needs to switch to an authenticator app. To reset a user's 2FA:
Click Identity Access Cloud and sign in as the domain owner.
Click Two-factor authentication.
Select Disable for someone else at the bottom of the screen.
The person who set up the account can add account owners, so other users can sign in and manage 2FA.
Use backup codes
If a user set up 2FA themselves, they can use the backup codes from setup to get back in when their authenticator app codes don't work.
Codes sent by email
If a 2FA code sent by email doesn't arrive, ask your IT team to whitelist our email server.