Admin OU Controls

Security > Authentication > 2-Step Verification

Google Admin Help Documentation: https://support.google.com/a/answer/175197?hl=en&ref_topic=2759193&visit_id=637714834727675957-2849613343&rd=1

  • OU based
  • Turn on (checkbox)
  • Enforce (if not enforced, users can decide the following)
    • New User Enrollment Period (if enforced)
    • Trusted Devices (if enforced)
    • Methods (if enforced, limited options)
      • Any
      • Removing Text/Phone Calls (some government entities are not allowed to use these forms of 2FA)
      • Security Key only
        • Grace Period for Security Key only enforcement
        • Security codes for Security Key only enforcement

Individual User Controls: Disabling & Backup Codes

Select User > Security > 2-step verification

  • Turn it off (user must re-enroll to turn back on)
  • Get Backup Verification Codes (if in an enforced OU and the grace period has ended)

Recommendation - allow everyone to turn on 2FA including students (admin can always remove as necessary - if you already have to reset their password, you can do it all in the same screen - simple)


[Back to Table of Contents]

  • No labels