2-Factor Authentication by Phone or Email
We want to require our GLM users to enable 2-factor authentication, but are concerned about asking them to download an app to do so. Most of them probably aren't using an authenticator app anywhere else. We would like to offer them the option to have a code sent to their phone or email to authenticate so they are not required to download an authenticator app.
-
Irena
commented
Nolan, just to add our recent experience - we've recently run two GLM grant rounds and some of our users had issues logging in with 2fa using an authenticator app. While we were able to reset 2fa on their account as admins and step them through the process to reset 2fa on their phones, it was time consuming for us and for them. Frustrating for both parties too, especially when submission deadlines loomed. So many of these users told us they'd never had to use an authenticator app before, that they'd always received texts to their phones or a code sent to their email account, even for banking.
-
Irena
commented
Hi Nolan
This is an idea we're very keen to see implemented. We want our users to have the option of entering a verification code sent to an authenticator app, email, or mobile phone.
This is already available for Foundant CSuite users - all three options are available. -
Jessica Zutz
commented
This is an important topic and there is an similar idea located here: https://idealab.foundant.com/forums/339786-glm-slm-idea-lab/suggestions/49710542-additional-multi-factor-authentication-options.
-
Irena
commented
We've recently closed two rounds and the number of applicants who had 2fa issues was incredible. We were able to reset 2fa on their account so they would see the QR code and then be able to set up 2fa again. But frustrating for everyone especially when due dates loomed.
CSuite, a Foundant product which we also use, allows multi-factor authentication: authenticator app; text to mobile; or email to email address to receive a verification code. We need this in GLM too.