3 ms·
That seems great for expediency, but it also seems to place the exposure to social engineering back on the org, who might not have the best tools to authenticat
by NoZebra120vClip 4y ago
That seems great for expediency, but it also seems to place the exposure to social engineering back on the org, who might not have the best tools to authenticate someone whose account is already in lockdown.
For example, I'm a remote user, and if I got logged out of all company systems, I could phone my supervisor or send email from my personal account. Is that enough to assure the Super Admins that I am who I say I am?
- getoffmyyawn 4y agoNo, that wouldn't be enough. Our employees can only access the Google Workspace from managed devices and everyone is required to use 2fa. If your account is flagged for a suspicious login, we call you. Unlocking your account only allows access from your assigned managed devices. If you have forgotten your password or lost your 2fa token and/or managed device, you have to come to the office in person.