Require two-factor authentication for all members
As an organization administrator, you can require every member of your organization to use two-factor authentication. Each member then has to set up an authenticator app before they can use Cesura.
Turn on the requirement
- In the sidebar, open Organization Management.
- Click Preferences. The page is titled Organization Preferences.
- Turn on Require two-factor authentication for all members.
- Click Save.
The requirement covers every member, including you. If you have not set up two-factor authentication on your own account yet, set it up on the Security tab of your profile before you save.
To stop requiring it, turn the setting off and click Save.
What members see
- Members who have not set it up are sent to the Security tab of their profile, with the message “Your organization requires two-factor authentication. Set it up now to continue using Cesura.” They cannot use the rest of Cesura until they set it up. This applies to members who are already signed in, too.
- Members who have set it up keep working as before.
- No one can turn it off while it is required. The Security tab says “Your organization requires two-factor authentication, so it cannot be turned off.”
Members can follow the steps in Signing in, verifying your account & resetting your password.
Members who sign in with SSO
Members who sign in through your organization's single sign-on (SSO) also have to set up two-factor authentication in Cesura. At SSO sign-in, the second factor is your identity provider's job, so turn on multi-factor authentication there too. See Single Sign-On (SSO) for your organization.
Cesura staff and your organization
Cesura system administrators must complete two-factor authentication on their own accounts before they can act in your organization. Cesura also records each time its staff open your organization's simulation reports or analysis. To see who accessed your organization's data, ask through Contact support in the sidebar.