Making two-step sign-in compulsory

What you’ll do: turn on two-step sign-in for yourself, then make it compulsory for everyone.

Who can do this: org admins make it compulsory. Everyone sets it up for themselves.

Steps

1. First turn it on for yourself: click the sign-out icon at the bottom left, open Sign-in security and set up two-step sign-in.
2. Open Organisation and the Sign-in and security tab (or the Two-step sign-in set-up step).
3. Tick Require two-step sign-in for everyone who signs in with a Dexta password.
4. Confirm with Yes, require it.

What your people see

1. At their next sign-in they see Set up two-step sign-in. They scan the QR code with an authenticator app (Microsoft Authenticator, Google Authenticator, Authy or 1Password), or type the key shown.
2. They type the 6-digit code and click Turn on and continue.
3. They see Save your recovery codes. They copy or download them, tick I’ve saved my recovery codes and click Continue to Dexta Hub.
4. From then on, each sign-in asks for a 6-digit code.

Good to know

• Lost phone? On the code screen, click Lost your phone? Use a recovery code. Sign-in security shows how many of the 10 codes are left and makes New recovery codes.
• If someone loses both, an org admin can use Reset two-step sign-in on their account.
• People who sign in with Microsoft or another single sign-on use that provider’s own checks instead.
• Dexta’s own operator accounts always need two-step sign-in.

Related

• Signing in and the app launcher
• Microsoft sign-in
• Security at Dexta