2 ms·
I wish it had a feature in the admin section where one could disable different 2FA methods. For example, in my family everyone has SMS as a 2FA, as well as hard
by qwertox 5y ago
I wish it had a feature in the admin section where one could disable different 2FA methods. For example, in my family everyone has SMS as a 2FA, as well as hardware tokens and device prompts. SMS was there from the beginning, so everyone has it activated. Only one account is not using hardware tokens.
So what I'd like to do is to set SMS to off, and all the accounts which already have something like device prompts and/or at least one hardware token added, get SMS deactivated without user intervention.
- gepeto42 5y agoThere is, though it is not ultra granular. They introduced it last year and we mention it in the guide. https://workspaceupdates.googleblog.com/2019/03/more-control-over-2-step-verification-security-phone-sms.html https://workspaceupdates.googleblog.com/2019/03/more-control... Essentially you can enforce 2FA or not, then, you can allow ANY method, any method BUT telephony based (calls and SMS), or hardware security key only. The middle option for most people is a great one as it allows Google Prompt (push notifications) as well as Google Authenticator style OTPs, plus security keys.