What happens when "Require users to set up 2FA" is ticked but most users don't have it setup?

[marcusquinn]

I'm dreading the "I can't login" nightmare of trying to explain to 70 people how 2FA works, when all they want to do is "just get on with their work".

How is a user onboarded to 2FA when this "Require users to set up 2FA" tickbox is ticked and saved, but users will only just discover this next time they have to login?

[girish]

@marcusquinn When you enable it:

• All users without 2FA are logged out
• When they log back in, they will see a UI to setup 2FA. Like this:

It's a blocking/modal UI, so user cannot do anything without setting up 2FA.

[scooke]

@girish Cool. What do the next modals look like/say? It'll be handy to have a thorough walk-through for first-timers. Would this be found in the docs?

[girish]

@scooke Good point. When you click the Enable 2FA button, it takes you through the usual 2FA setup flow under Profile - https://docs.cloudron.io/profile/#enabling-2fa . I will add the screenshots to our docs

[girish]

I put the pics here - https://docs.cloudron.io/user-management/#mandatory-2fa

[scooke]

@girish That's awesome, thank you. I was going to do it and post the screenshots here, but paused, not sure if even starting the process would "turn it on" and then what... This is super helpeful.