0

I have a D7 site in which I've setup TFA using TOTP. If TFA is not required, the user can login with their user/pwd, visit the profile page, click the security tab, and setup TFA.

However, if TFA is required for their role, the only way they can setup TFA is to have an admin access their user profile and supply them the code to enter into their auth app, then wait for them to provide the code to enter into the user profile. That is tedious and cumbersome.

Most TFA tools allow the user to initially login to their account and then redirects them to where they can setup TFA themselves.

Am I missing something? Is there a better workflow available? We want to enforce TFA, but don't want to have to manually administer setup for all users.

Improve this question
2
  • I've not used the d7 module but in the d8 version you could allow X number of logins without TFA before they'd get locked out. Is there a setting for that? That would allow the users to set TFA themselves
    – unusedspoon
    Nov 15, 2022 at 17:22
  • no, there's no setting along those lines. but something like that is what I'm looking for.
    – lcdservices
    Nov 15, 2022 at 19:25

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.